{"type":"bundle","id":"bundle--9c9f23af-9641-e02b-83fc-00004375e60a","objects":[{"type":"marking-definition","spec_version":"2.1","id":"marking-definition--550e8400-e29b-41d4-a716-446655440000","created":"2026-08-23T09:38:12-04:00","definition_type":"tlp","name":"TLP:AMBER","definition":{"tlp":"amber"}},{"type":"indicator","spec_version":"2.1","id":"indicator--201dad11-9a70-22b6-cac6-0000913d22b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar","pattern":"[url:value = 'http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5802b-c222-17b0-d6cb-00000d545225","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/sserv.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/sserv.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6007b6-1ad5-b6aa-cb05-000037563039","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/ssj.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/ssj.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6eb3ba0-a549-43b7-c37e-00002664ccd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ff/22/6NkpoT2I_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ff/22/6NkpoT2I_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fe8fd6-1668-bc8d-cbc4-00009b6c57e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/86/e2/nuFlPuWf_o.png","pattern":"[url:value = 'https://images2.imgbox.com/86/e2/nuFlPuWf_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdab68b9-dc05-43df-5a23-0000d2d91b33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ce/60/RW99SPa3_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ce/60/RW99SPa3_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa9ef7-7246-4577-84be-00009d3ccd96","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png","pattern":"[url:value = 'https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2639638-5615-c100-8ccd-00002daeec1a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png","pattern":"[url:value = 'https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fefca66-8bac-7559-4a81-0000b98c321e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/.i","pattern":"[url:value = 'http://185.12.78.161:36220/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fbf8b2-7833-15dc-e422-0000c4a62f45","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/.i","pattern":"[url:value = 'http://36.66.139.36:53736/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5433dc85-511a-2094-22d4-000081d57794","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg","pattern":"[url:value = 'http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c135933e-8fe8-c0a2-0d50-0000d65c900f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","pattern":"[url:value = 'http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b219180b-3ad5-e151-4d11-00001e539a64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://mysura.it/njtzac0.tar","pattern":"[url:value = 'https://mysura.it/njtzac0.tar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886d6c15-26f9-4b06-fc87-000014d01df3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/.i","pattern":"[url:value = 'http://94.231.164.10:6432/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792cda41-d4a8-e00f-525b-0000cc21e356","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://191.33.171.242:55443/.i","pattern":"[url:value = 'http://191.33.171.242:55443/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8c1675-ae15-8923-10e5-00005eda9513","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/converting.php","pattern":"[url:value = 'https://deagroup-ks.com/converting.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5093700e-19a9-4abb-1c65-0000b8d1d3fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/approx.php","pattern":"[url:value = 'https://deagroup-ks.com/approx.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182314e-16aa-19a8-de97-00004b9900bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.m","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68347d65-3902-eea3-d4e5-0000014fbf03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.a","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfbf6cd-fdd2-7abc-88a5-000005882dce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/whiz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/whiz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfae7477-2817-92fb-ad0e-0000dff509d9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unexplainable.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unexplainable.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22f7366-57ee-dfbf-f380-000017efe582","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unthinkably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unthinkably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e6575e8-06de-7e68-1366-00003c17dcec","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/conditioner.php","pattern":"[url:value = 'https://kramersmarionnettes.com/conditioner.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f13a0f-55a6-106a-7959-000010391e62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/frustrating.php","pattern":"[url:value = 'https://kramersmarionnettes.com/frustrating.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57840397-119e-fb71-120f-0000cdd2ff76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/designer.php","pattern":"[url:value = 'https://kramersmarionnettes.com/designer.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdfbcf9-49fa-935c-715b-0000107f234f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/fizz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/fizz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26190b8e-1573-a33e-e8ac-000098420209","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/antienuretic.php","pattern":"[url:value = 'https://kramersmarionnettes.com/antienuretic.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4269f8d9-4bde-8fe2-7bf9-00009e25f91a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/redesign.php","pattern":"[url:value = 'https://kramersmarionnettes.com/redesign.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fd863-1989-2836-538a-00005cd7420f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/intermission.php","pattern":"[url:value = 'https://kramersmarionnettes.com/intermission.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0872cd-d626-c576-a611-00007ed3d370","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/roughness.php","pattern":"[url:value = 'https://kramersmarionnettes.com/roughness.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a93dc87-b58f-9469-a26b-00005487000c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/actionably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/actionably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb8cf42-f3f9-c09c-2749-00000eb0ec82","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php","pattern":"[url:value = 'https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7ec4c-8e8c-a362-5b61-0000678aca0c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.219.38.228:23053/.i","pattern":"[url:value = 'http://178.219.38.228:23053/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afee4b9f-8ad1-0c38-ce50-00005606e37d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://twu-hwt.org/scarica/","pattern":"[url:value = 'https://twu-hwt.org/scarica/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d40a875d-5174-ade9-c5f4-000004051f0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://jawaratekno.com/rid/rid.js","pattern":"[url:value = 'https://jawaratekno.com/rid/rid.js']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eaa0918-af87-bc3e-23be-000001824687","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/.i","pattern":"[url:value = 'http://181.49.47.190:46516/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbda7665-2186-2183-d170-0000a509a964","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.129.177.162:26290/.i","pattern":"[url:value = 'http://181.129.177.162:26290/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43f7b1e-00fe-ca17-b695-000098634600","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://friendsofsclarc.org/pEp/per.zip","pattern":"[url:value = 'http://friendsofsclarc.org/pEp/per.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33fbdc6d-55da-c791-0314-0000b39bbc69","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c0f53fa-9b28-078a-76ae-00004d0ca0b2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eae0d0f3-d603-4ef8-f70a-000062c6afaa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c745e3b-3037-387b-7254-0000af188a1c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ce3e4-0200-fb52-723d-0000cbc0520d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2755c99-9251-adc6-6b44-000030d55188","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e22f-7f75-b2b1-2b4e-0000c7294077","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cfbbdc-a8c9-0409-2d99-00007c0f212c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac0437-2a80-0e95-2c4d-00006e5e9cce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8870cb3-7281-32c4-e486-0000ec075cd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b48270-66c5-5e59-93fa-0000653ea04b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf94755-1e70-97f5-faad-0000e5583a43","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be226e-09a5-f3b7-d51e-00003d547b5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e645b4-9304-5595-f794-0000f246ef89","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff1d279-1a16-5cca-1003-0000d6e27389","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e65d34-832c-2a95-336d-000091686c8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/i386","pattern":"[url:value = 'http://75.119.134.80/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea3f824-1ad0-0f59-69a4-00005888324b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/armv7l","pattern":"[url:value = 'http://75.119.134.80/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da1712-93af-1f26-d1e8-000088518d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1566150-0f35-6aeb-bd36-00006624c598","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e244df38-745f-ed02-09d6-0000a91fad3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f1c1421-0e27-2a47-223a-0000f756e26c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50435d-2926-3bfc-0027-0000202db525","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38cb9ba-1223-825c-6434-0000edb6e431","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6529fef-bdc0-a59e-fe41-0000257474e8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://2.57.122.121/ping","pattern":"[url:value = 'http://2.57.122.121/ping']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea798067-e79d-c18d-57ec-0000abb4c932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Mozi.a","pattern":"[url:value = 'http://81.16.123.55:41567/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4081af0-a3e1-8b61-1168-0000ff444473","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm5","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d014b4a-1bcf-a055-eb75-0000edf1eb9d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm6","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930f2a66-d036-fcf8-20e5-000047f82316","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b487ef0a-d4b7-e6e6-d1fa-000053db396c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.sh4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec673c93-8f89-130d-46e6-0000ab06ceef","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.x86","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66071de2-5f21-65aa-a4d6-00003f18b8b9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/i","pattern":"[url:value = 'http://98.103.171.36:19021/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14280d6b-75d4-5275-053f-000030efb7cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/i","pattern":"[url:value = 'http://103.90.207.234:55903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163b4358-99f8-6653-d1fe-0000fc86cf52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/i","pattern":"[url:value = 'http://91.92.82.180:17789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d368b2-99a5-1c24-5d34-000080520dd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/i","pattern":"[url:value = 'http://213.6.74.138:39286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f8b23f-537b-13f6-7291-0000bed451e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/i","pattern":"[url:value = 'http://93.123.169.160:27058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--726f021e-9e2e-1953-a6f4-00000df5d5ed","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/i","pattern":"[url:value = 'http://190.113.124.155:64726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1adce486-5d50-9ad0-ef13-0000a4b98a91","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/i","pattern":"[url:value = 'http://186.154.93.81:8125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5330578c-7caf-ceac-2fa8-0000cf7a5c26","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/i","pattern":"[url:value = 'http://103.245.10.51:56156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a843ceb-561b-91cd-3c7a-0000c8e74463","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.101.83:1609/i","pattern":"[url:value = 'http://213.6.101.83:1609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49129a4-6891-8004-afdc-0000e9498cdf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.84.212.18:20781/i","pattern":"[url:value = 'http://154.84.212.18:20781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790ba65e-492d-ae1f-ebf7-0000fddb848a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/i","pattern":"[url:value = 'http://103.227.118.45:56789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17942180-d53c-7652-3e31-00006ebe1c87","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/i","pattern":"[url:value = 'http://36.66.139.36:53736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d2ef8c-29cc-fc8b-e137-0000ad62fbf8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/i","pattern":"[url:value = 'http://37.57.33.51:49049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea6df56-45bc-6d2b-0ef5-0000a552c87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/i","pattern":"[url:value = 'http://94.251.5.51:31559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c28abe6f-dcdb-17bd-4fcd-0000c0d62079","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/i","pattern":"[url:value = 'http://36.88.180.115:20043/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9322b204-989a-98e6-3805-0000f0ec603f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/i","pattern":"[url:value = 'http://181.49.47.190:46516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46457c30-fe3a-1737-4dfb-00005521239d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/i","pattern":"[url:value = 'http://185.71.69.198:34190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff91e3d1-3145-1f3e-a1a2-00008a6619ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/i","pattern":"[url:value = 'http://109.108.84.121:28531/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5776503c-5781-fd60-9207-0000dadad050","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/i","pattern":"[url:value = 'http://41.77.74.90:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e26fe9-eedb-fe42-98ea-0000fe245a2d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/i","pattern":"[url:value = 'http://103.187.151.107:1500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45262dd7-5d0f-5dcd-256b-00008e97b94c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.151.56.42:28186/i","pattern":"[url:value = 'http://46.151.56.42:28186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc57a8c-165f-5d81-7af8-000022870062","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/i","pattern":"[url:value = 'http://89.216.100.166:30359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e457a4-3a3d-c4c8-2c97-0000789a5d62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/i","pattern":"[url:value = 'http://94.231.164.10:6432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931fd70-b867-8f2b-286c-0000504bb22d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/i","pattern":"[url:value = 'http://77.89.245.118:44811/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbcecd6-3dc6-be4d-ed1a-00004d6e4f20","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/i","pattern":"[url:value = 'http://212.73.75.84:60761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccefcaf3-6793-fc1d-66eb-0000425448c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3a88fc-f3ff-6523-ff89-00007dfe04a0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/i","pattern":"[url:value = 'http://82.114.200.50:48416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff16f034-f323-6568-deee-0000377c5cf1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/i","pattern":"[url:value = 'http://78.26.180.129:37261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a27a98-92d2-0ae2-08f4-0000ea7eff28","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://58.145.168.170:25222/i","pattern":"[url:value = 'http://58.145.168.170:25222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdcb37aa-0305-2856-05e0-0000bc2826e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/i","pattern":"[url:value = 'http://138.122.43.76:56486/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c6cdaa-a9a6-5fd3-3479-00002cca53cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/i","pattern":"[url:value = 'http://124.194.46.204:44528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd932ef-74c0-d969-2e2d-000044b7ec4d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/i","pattern":"[url:value = 'http://37.252.66.188:12165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6931023-e61f-9b47-5ad1-0000edb96d4e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/i","pattern":"[url:value = 'http://190.2.237.104:65088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8af92c-f752-6eef-e6ce-00000d32ca6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/i","pattern":"[url:value = 'http://167.250.193.253:19901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e22ef5b-3ee9-f196-4e4f-000098192aa6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/i","pattern":"[url:value = 'http://200.61.163.235:27538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2836c14f-95c1-3976-ccf6-000092ebfced","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.193.59.78:39941/i","pattern":"[url:value = 'http://181.193.59.78:39941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad3fd6-eb5b-fa05-101e-00008dcbf97f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.78.201.3:62330/i","pattern":"[url:value = 'http://202.78.201.3:62330/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ece8278-e079-d40a-08c3-0000dbfd6956","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.114:10702/i","pattern":"[url:value = 'http://154.0.129.114:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f31d1b-b29d-5aaa-9ec1-00003fddc615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://149.255.10.46:32625/i","pattern":"[url:value = 'http://149.255.10.46:32625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3b0c8c-f3c9-be88-c4e5-000001e70109","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/i","pattern":"[url:value = 'http://178.188.30.171:14759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e341958-8929-3b9d-9aaf-00002c6d6715","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/i","pattern":"[url:value = 'http://178.151.143.2:21623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d0cddb-33a4-2e34-b10a-00008d2de45c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/i","pattern":"[url:value = 'http://181.211.252.34:1808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8dc6000-4e0a-bbbd-bb47-00001eeeb04e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/i","pattern":"[url:value = 'http://188.72.6.218:43597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd19386-96e0-5036-0528-0000ba7619bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/i","pattern":"[url:value = 'http://185.236.46.120:45209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c236341-fb4d-38e3-d572-00006999eb33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/i","pattern":"[url:value = 'http://202.148.20.138:24291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ae47f6-42fd-842a-9037-0000cb691d25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/i","pattern":"[url:value = 'http://200.69.219.25:6584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c1414e-0da0-1630-34eb-00008b73697f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/i","pattern":"[url:value = 'http://202.148.18.218:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36af24be-4159-8b5b-0a11-00008c37c95d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/.i","pattern":"[url:value = 'http://212.73.75.84:60761/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55bd325-8aca-8dd7-ce44-00009c5cdfc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.92.68.241:27066/.i","pattern":"[url:value = 'http://36.92.68.241:27066/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd311bb4-00f5-201b-73c2-0000cec9d87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/.i","pattern":"[url:value = 'http://178.188.30.171:14759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0948af72-a9f7-8665-7417-0000f29b901d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/.i","pattern":"[url:value = 'http://77.89.245.118:44811/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db82bdad-b659-f063-976e-0000770bb9bf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/.i","pattern":"[url:value = 'http://94.251.5.51:31559/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7969b318-13b4-3b2e-4f82-00001dc59398","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.122.211.138:31644/.i","pattern":"[url:value = 'http://200.122.211.138:31644/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781f0df6-ca50-19e5-e463-00007d99390c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/.i","pattern":"[url:value = 'http://78.26.180.129:37261/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa6e72-e4b0-46e4-f154-00006e7ef520","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/.i","pattern":"[url:value = 'http://138.122.43.76:56486/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30312057-6d12-add5-dbff-000059df5933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.92.143.90:65469/.i","pattern":"[url:value = 'http://109.92.143.90:65469/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222096f4-0e4e-1415-c41a-00005ace93d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.190.20.228:46441/.i","pattern":"[url:value = 'http://185.190.20.228:46441/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f687df6f-a003-74e9-2a12-0000c2810616","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/.i","pattern":"[url:value = 'http://81.16.242.236:28115/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83207f6e-2b5e-9c7b-2a53-000025f6e6f6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/.i","pattern":"[url:value = 'http://103.90.207.234:55903/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d331835-b0fb-b3e7-26d5-0000eb1d9bc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/.i","pattern":"[url:value = 'http://185.236.46.120:45209/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57922d43-b08e-0a98-88f0-0000b881dee7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://79.175.42.206:7773/.i","pattern":"[url:value = 'http://79.175.42.206:7773/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8494265-c567-b677-01e1-00007725981e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/.i","pattern":"[url:value = 'http://202.148.18.218:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed146b0c-cce0-c55c-e2bf-000061bfda36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/.i","pattern":"[url:value = 'http://82.114.200.50:48416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a329bdd2-4c49-8f36-5261-000069a2ecca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/.i","pattern":"[url:value = 'http://190.113.124.155:64726/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280e7169-e188-74e9-5608-000062ecd099","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/.i","pattern":"[url:value = 'http://81.16.123.55:41567/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--427c6490-8dac-ed71-ee15-000051476ea8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/.i","pattern":"[url:value = 'http://202.148.18.220:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f54d4d-0ef1-1035-7acf-000004346cb6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://193.106.58.174:32789/.i","pattern":"[url:value = 'http://193.106.58.174:32789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaee7b-0af3-f636-112d-000031470703","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/.i","pattern":"[url:value = 'http://213.6.74.138:39286/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb9a63-4d4d-a20b-6311-000039ff4900","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/.i","pattern":"[url:value = 'http://185.71.69.198:34190/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419c24f7-c4ec-c4fa-c69b-00004cac1e73","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/.i","pattern":"[url:value = 'http://202.5.50.108:15808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1729f853-f959-a44a-c97a-0000045b2689","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/.i","pattern":"[url:value = 'http://118.71.250.6:28411/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc50dd1-88da-5077-1605-0000269d5220","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/.i","pattern":"[url:value = 'http://190.2.237.104:65088/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d04e731-cf1f-9cba-01c5-0000c78d6b16","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.140.32.219:12617/.i","pattern":"[url:value = 'http://78.140.32.219:12617/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b291d19d-6be3-cde6-1576-00001e963933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.170.119.100:1863/.i","pattern":"[url:value = 'http://95.170.119.100:1863/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf20d36-be1f-cf32-f12c-0000328d31cd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/.i","pattern":"[url:value = 'http://91.92.82.180:17789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0910ef-e3be-ba6f-6e3f-000065d6787b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/.i","pattern":"[url:value = 'http://103.245.10.51:56156/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a13422-1128-c237-8514-0000d544b7e1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/.i","pattern":"[url:value = 'http://181.211.252.34:1808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd31e5c2-facd-b7fd-163f-0000148a00ae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/.i","pattern":"[url:value = 'http://89.216.100.166:30359/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8684bc2-36c4-c772-2588-000036b978cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/.i","pattern":"[url:value = 'http://95.158.175.214:23270/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ec33d3-fa6e-c045-092f-0000266e05fd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/.i","pattern":"[url:value = 'http://188.72.6.218:43597/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--766ce564-f4d1-e67b-1d1f-0000dca50cfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/.i","pattern":"[url:value = 'http://41.77.74.90:10702/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc33a3c-7060-6ea1-6f25-0000fec314c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/.i","pattern":"[url:value = 'http://93.123.169.160:27058/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f3bdd6-7c00-f8b4-bf99-000008ad7f27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/.i","pattern":"[url:value = 'http://202.148.20.138:24291/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d4e16dd-ba46-563d-1589-0000fcdb3a80","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/.i","pattern":"[url:value = 'http://200.69.219.25:6584/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ec968-fa39-97d1-1336-0000bf3d0d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/.i","pattern":"[url:value = 'http://37.252.66.188:12165/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5b4349-c71d-faea-5acb-0000acd067c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.69/curl","pattern":"[url:value = 'http://66.71.242.69/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a231935-d319-5022-0fab-0000efb1baa5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.70/curl","pattern":"[url:value = 'http://66.71.242.70/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500790ec-4e8b-876a-a5f8-0000bbab7383","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.68/curl","pattern":"[url:value = 'http://66.71.242.68/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1512239-a5b6-4b49-c15e-00006412bc52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.67/curl","pattern":"[url:value = 'http://66.71.242.67/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffcadef-4dd1-e3f6-d6e9-0000f96aae5f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/i","pattern":"[url:value = 'http://190.145.205.178:6360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f12239-e61b-c173-6728-0000b2c41fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/i","pattern":"[url:value = 'http://212.107.232.167:21838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f301f-9539-b8bb-da2d-0000da29cb8a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/i","pattern":"[url:value = 'http://116.58.51.90:1162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb6e7a5e-c2ab-bd1d-5ca7-0000ed8e9bfc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/i","pattern":"[url:value = 'http://109.245.220.229:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d6b634-2549-b741-ee36-00000a3b76ca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/i","pattern":"[url:value = 'http://151.236.247.230:19193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2790a190-49a9-998c-fe80-00004e76e395","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/i","pattern":"[url:value = 'http://202.148.5.34:35700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fae81a6-0679-8b52-3d73-00003a754306","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.155:59323/.i","pattern":"[url:value = 'http://182.253.115.155:59323/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ee236-95e0-5c09-597f-0000b2d8e357","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.249.96:46703/.i","pattern":"[url:value = 'http://81.16.249.96:46703/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7817cdb0-a9e6-5bb5-cec4-0000ccaf9702","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/.i","pattern":"[url:value = 'http://151.236.247.230:19193/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a97cec56-a31a-4fdf-2b96-0000373f96f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/.i","pattern":"[url:value = 'http://202.148.5.34:35700/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2923628-867b-dfad-995b-000055353139","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/.i","pattern":"[url:value = 'http://109.87.223.241:39478/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e99699-9cd0-ccfd-12e2-0000f879b197","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/.i","pattern":"[url:value = 'http://212.107.232.167:21838/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c7ad76-db16-9549-0f48-0000baa3c42f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/.i","pattern":"[url:value = 'http://116.58.51.90:1162/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691eecf7-a8a4-3261-81be-00004c39a111","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/.i","pattern":"[url:value = 'http://190.145.205.178:6360/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54cfd3a-7bf4-b927-05d3-000003f2b776","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/.i","pattern":"[url:value = 'http://109.245.220.229:44759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49dd828-31dd-ba11-3dea-00000577f2ac","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/.i","pattern":"[url:value = 'http://88.116.62.226:52714/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc92216-0613-e68b-4e62-0000a9d7a677","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/.i","pattern":"[url:value = 'http://89.231.14.137:2282/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9530ce-f6bc-95a8-4774-00003064af66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1123/sshd","pattern":"[url:value = 'http://68.226.36.150:1123/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f052ddec-d82f-d721-7f04-0000e57de710","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1109/sshd","pattern":"[url:value = 'http://174.71.237.86:1109/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36375b21-1d22-b98e-e9ec-00002c0b48df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.45:8088/sshd","pattern":"[url:value = 'http://102.68.74.45:8088/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447f759e-0e16-f26e-1934-00009109310e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.222.113.214:49012/sshd","pattern":"[url:value = 'http://31.222.113.214:49012/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a089775-0b2a-35e4-9af4-000096977bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50003/sshd","pattern":"[url:value = 'http://91.164.39.142:50003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270da7cd-08b7-8387-7571-0000f2f61609","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50004/sshd","pattern":"[url:value = 'http://91.164.39.142:50004/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec517468-5702-f496-42a0-0000e58d024a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50005/sshd","pattern":"[url:value = 'http://91.164.39.142:50005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ab1445-a72c-27d2-60f0-0000ed8da7e0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://112.4.110.42:37782/sshd","pattern":"[url:value = 'http://112.4.110.42:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c8f38-9cf1-6698-3546-00006ba3399d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37782/sshd","pattern":"[url:value = 'http://223.108.58.15:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec9f666-52a9-f8c6-3375-00001872ce6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8027/sshd","pattern":"[url:value = 'http://165.73.108.6:8027/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c9fe8a-6c31-1674-1462-000070536d8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1103/sshd","pattern":"[url:value = 'http://174.71.237.86:1103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b856650-8c74-c269-08bf-000036bfd0ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.250.54.75:84/sshd","pattern":"[url:value = 'http://46.250.54.75:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be963f59-a29d-897a-e130-0000d6a94c62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.14.38.66:1081/sshd","pattern":"[url:value = 'http://80.14.38.66:1081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e558b470-2d49-6cd0-9b2d-0000459e9f61","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8023/sshd","pattern":"[url:value = 'http://165.73.108.6:8023/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a890157b-0560-d785-b496-00006b68b7e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8021/sshd","pattern":"[url:value = 'http://165.73.108.6:8021/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b312ad8-f2ef-1ddc-54cf-00004959ed6f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.13:37782/sshd","pattern":"[url:value = 'http://223.108.58.13:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688b0624-3c45-d51d-7aec-0000e70256d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1112/sshd","pattern":"[url:value = 'http://24.234.159.5:1112/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4765cc-0096-9329-e185-00009cf16144","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.93.103.10:51080/sshd","pattern":"[url:value = 'http://212.93.103.10:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41e8d1-c6c8-e2c4-ba11-0000ef411287","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:83/sshd","pattern":"[url:value = 'http://178.176.204.250:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c015f81-b293-8e2f-aa4f-00005ea54508","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1101/sshd","pattern":"[url:value = 'http://174.71.237.86:1101/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac506c6-2238-4b12-1466-0000dc003e8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50006/sshd","pattern":"[url:value = 'http://91.164.39.142:50006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c0b7-8ace-170d-2515-000044963dfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.0.241.65:8082/sshd","pattern":"[url:value = 'http://31.0.241.65:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3539cf6e-ac1a-2ee2-a646-0000a558e038","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9114/sshd","pattern":"[url:value = 'http://118.69.157.212:9114/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7284a433-29d6-915a-4fd4-0000f2e520c1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.170.32.148:84/sshd","pattern":"[url:value = 'http://188.170.32.148:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9ab9f6-bfb0-4a7a-7d4d-000060e225ea","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://144.6.87.144:2400/sshd","pattern":"[url:value = 'http://144.6.87.144:2400/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15444d0-5299-3683-b171-000081ec6f83","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50002/sshd","pattern":"[url:value = 'http://91.164.39.142:50002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50cf67b6-ac24-caaa-b100-000014c2e51d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50008/sshd","pattern":"[url:value = 'http://91.164.39.142:50008/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36407d6d-fffc-4241-7654-000058345bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.173.70.100:86/sshd","pattern":"[url:value = 'http://31.173.70.100:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c39716-79e3-2ec6-ab4e-0000d0b015ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8029/sshd","pattern":"[url:value = 'http://165.73.108.6:8029/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f45edd-9c81-24b2-aeaa-0000efcfa577","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9111/sshd","pattern":"[url:value = 'http://118.69.157.212:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ccc6de-834a-e1ce-243a-00007c13a3a4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8020/sshd","pattern":"[url:value = 'http://165.73.108.6:8020/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3301576d-32b4-8910-594f-00003684e6eb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8025/sshd","pattern":"[url:value = 'http://165.73.108.6:8025/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c9e36b-7e30-59f3-1600-0000271fbb25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1122/sshd","pattern":"[url:value = 'http://68.226.36.150:1122/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ed0141-d137-6a1f-ad81-0000428e0dad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.2.229.122:8003/sshd","pattern":"[url:value = 'http://185.2.229.122:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0728db53-b14d-ce7c-4d22-0000cdf5616e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9219/sshd","pattern":"[url:value = 'http://118.69.157.212:9219/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0467d5-7385-1eaf-5c2a-000052e58b22","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8022/sshd","pattern":"[url:value = 'http://165.73.108.6:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e934023d-a83d-1fcd-b096-0000cb47a5b3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.148.194.54:9013/sshd","pattern":"[url:value = 'http://82.148.194.54:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc372318-03ed-1db9-a5c4-0000e05765d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.66.30.68:9013/sshd","pattern":"[url:value = 'http://92.66.30.68:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c029bfea-93d6-45d9-f260-000071ec3a03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002//sshd","pattern":"[url:value = 'http://188.147.175.138:5002//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed47f6bf-121a-f9dc-7b42-0000902a6e66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:84//sshd","pattern":"[url:value = 'http://178.176.204.250:84//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a778760-25eb-d3c0-75ed-0000060264a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8085/sshd","pattern":"[url:value = 'http://76.53.38.126:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32921bb3-9cb8-813b-f87f-000084593c27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10005/sshd","pattern":"[url:value = 'http://123.143.141.75:10005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77bf266b-6fb8-cb72-aeb4-000028f44c21","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8087/sshd","pattern":"[url:value = 'http://76.53.38.126:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ff9d24-2c25-5ca9-7155-000022dfb07a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8086/sshd","pattern":"[url:value = 'http://81.42.247.62:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550c8f0b-2af2-51d1-5f2b-00004d8e62b5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8888/sshd","pattern":"[url:value = 'http://76.53.38.126:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce3f5ce-66b7-78f9-c05e-00003f8f5862","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8086/sshd","pattern":"[url:value = 'http://76.53.38.126:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9edbf052-5b5f-2279-e375-00009ef3550f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://141.134.214.217:8003/sshd","pattern":"[url:value = 'http://141.134.214.217:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac33f4a7-bf5d-870d-28d8-0000e7414b48","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.230.215.65/sshd","pattern":"[url:value = 'http://95.230.215.65/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de2057b-8f9d-055c-df32-00009fa1b593","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.82.83.143:8888/sshd","pattern":"[url:value = 'http://223.82.83.143:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46bef8a-1b69-8bd7-a136-00001b528cbf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8085/sshd","pattern":"[url:value = 'http://81.42.247.62:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62320c97-d795-9584-8fc4-00006848f535","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8083/sshd","pattern":"[url:value = 'http://81.42.247.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2772b7d8-e9f9-0cf4-9f0b-00006263096e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8082/sshd","pattern":"[url:value = 'http://76.53.38.126:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a34e81-76e9-c6c6-7e93-000035a4a439","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8087/sshd","pattern":"[url:value = 'http://81.42.247.62:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d76571a-4b8c-bc4b-c673-0000a95b7c0f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8057/sshd","pattern":"[url:value = 'http://80.24.87.77:8057/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b67057-3e0b-6551-c892-000090b81267","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8080/sshd","pattern":"[url:value = 'http://178.183.208.134:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f373c2f-b357-c261-b6c1-00000c2998fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8084/sshd","pattern":"[url:value = 'http://81.42.247.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123ad67b-1b3b-b2bd-3538-0000bdbc7926","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://132.255.192.122:9001/sshd","pattern":"[url:value = 'http://132.255.192.122:9001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78eaa3f2-0341-901d-77c0-000087c30624","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8081/sshd","pattern":"[url:value = 'http://178.183.208.134:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde20096-33ae-5e17-ef88-000043ec0205","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002/sshd","pattern":"[url:value = 'http://188.147.175.138:5002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96edf32-0347-8db4-cde4-00007f33e176","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8082/sshd","pattern":"[url:value = 'http://81.42.247.62:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562a84bf-df07-6902-30bd-0000be20684c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8056/sshd","pattern":"[url:value = 'http://80.24.87.77:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f748a-c545-e7b9-6408-0000de8f6a11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1111/sshd","pattern":"[url:value = 'http://24.234.159.5:1111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fade35-a109-b0c9-b70c-000094059105","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.216.105.81/sshd","pattern":"[url:value = 'http://102.216.105.81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1928c7-4b27-539b-ac57-000059a0c3da","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:50080/sshd","pattern":"[url:value = 'http://212.3.211.157:50080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569add76-6dae-35ee-99da-000080469012","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.77.57.16:8585/sshd","pattern":"[url:value = 'http://82.77.57.16:8585/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c42e33-3b2c-f872-f754-00004555111b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37780/sshd","pattern":"[url:value = 'http://223.108.58.15:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b406691d-4cd6-5358-a674-0000bdd400e2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10006/sshd","pattern":"[url:value = 'http://123.143.141.75:10006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf20095-5f29-94fc-a42f-00005c1dac9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://221.10.233.217:8618/sshd","pattern":"[url:value = 'http://221.10.233.217:8618/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9909bfa6-8ae2-00b3-aa54-000033026e36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1393e0d-a01c-82ce-8a2f-0000e26e4559","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://170.210.81.104/tftp","pattern":"[url:value = 'http://170.210.81.104/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e47cd1-8fa6-bfe5-c69a-00005cd00ad0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.57.39.2:19001/tftp","pattern":"[url:value = 'http://202.57.39.2:19001/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47f4f30-6877-d917-5d0b-000067469fbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.108.63.242/tftp","pattern":"[url:value = 'http://190.108.63.242/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4406037d-26de-6927-7e40-00006a11481f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.72.167.124/tftp","pattern":"[url:value = 'http://182.72.167.124/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01688c2a-0716-e5e4-c6e4-000015f3b8b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.224.107.4:8580/tftp","pattern":"[url:value = 'http://185.224.107.4:8580/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12c14d8-5715-7b75-28eb-00006b9a9a71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.184.185.198:4443/tftp","pattern":"[url:value = 'http://89.184.185.198:4443/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c38f2b-219c-ab8d-5854-00007e18fb11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://45.118.79.103:8892/tftp","pattern":"[url:value = 'http://45.118.79.103:8892/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4b679c-438a-089b-ef9c-0000cbcd61d8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d50b85-c94c-74f8-7328-000006c56352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://down.ftp21.cc/TQ.jpg","pattern":"[url:value = 'http://down.ftp21.cc/TQ.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe5e032-9d69-6fc9-e9f0-00005d8791f0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.175.101.203/02.08.2022.exe","pattern":"[url:value = 'http://85.175.101.203/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5055372-3e97-bdfe-8bb3-000042ff033d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips","pattern":"[url:value = 'http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a1ae5ee-f367-ec5f-8cb8-0000896146dd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f899a86-3b7d-e183-a002-00000e047b97","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l","pattern":"[url:value = 'http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9449f7c3-f8dd-eb16-feaa-00003362e36d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d06d68-4ae8-4d38-9d8b-0000e43218fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ca59f1-7292-da3b-f715-000050b89103","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc","pattern":"[url:value = 'http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--509e529c-c0a0-a28f-fa50-00009f4585ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l","pattern":"[url:value = 'http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d630c78d-ea59-601d-a76e-0000bff9bc8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k","pattern":"[url:value = 'http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8752dd32-dbee-849d-96b1-0000626aff5d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53630681-bf64-3b2c-6851-00009660a32e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49da0564-cccb-374e-7647-0000a0d9e994","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l","pattern":"[url:value = 'http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d02a06-619a-406d-f7c4-0000194327c5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64","pattern":"[url:value = 'http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--568971f3-aea1-4b99-82a5-0000e1b4fb42","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin","pattern":"[url:value = 'http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103c748f-a767-a047-4afd-00007a23d976","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1562f475-0a9e-03c3-0ccf-00007520cbcd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc","pattern":"[url:value = 'http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--402a2b52-7d6d-7fd4-50ac-000036858b8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586","pattern":"[url:value = 'http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7979937f-314b-b4b2-c871-0000d86e7afb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2954ce42-640f-fe5a-5973-0000be177304","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0305393b-0c17-b84f-063c-0000a2a636e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3d65cda-e9d5-879b-d05d-00000dd69032","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bb0667-7647-d874-bb48-0000b3075539","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.121.250.206:8080/tftp","pattern":"[url:value = 'http://89.121.250.206:8080/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329858d5-d026-0a21-edf2-0000f3827e6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:81/tftp","pattern":"[url:value = 'http://93.182.76.169:81/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c2a7b-d352-b682-649b-0000ca0f42a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:82/tftp","pattern":"[url:value = 'http://93.182.76.169:82/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01acabc2-01ba-4bb6-64ee-0000f4ce8d60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.104.213.45:6004/tftp","pattern":"[url:value = 'http://190.104.213.45:6004/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e216cea-3285-91a5-edee-0000d5222413","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://103.54.153.49/XClient.exe","pattern":"[url:value = 'https://103.54.153.49/XClient.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ef6dd-03ba-b98c-43b7-000024761b76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://soft.wsyhn.com/soft/wnbsqv3008.exe","pattern":"[url:value = 'https://soft.wsyhn.com/soft/wnbsqv3008.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcaf34b6-c19d-77f0-f9f8-0000c8e68a5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.166.211.222:6202/sshd","pattern":"[url:value = 'http://109.166.211.222:6202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5f2567-fc5b-6b9e-b853-0000aac90484","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.69:8055/sshd","pattern":"[url:value = 'http://102.68.74.69:8055/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73bcabc9-953f-d8e1-c0da-0000e52c7297","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/i","pattern":"[url:value = 'http://178.211.135.170:12768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af6b7cd8-a717-21c6-c811-00002e06afa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://83.218.189.21:5195/i","pattern":"[url:value = 'http://83.218.189.21:5195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5a8c80-2ec3-2b50-1031-000009cb315c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/i","pattern":"[url:value = 'http://202.105.196.30:52286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7208653-08e7-b6f2-51d2-0000cc3bcaf5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.238.209.82:26331/i","pattern":"[url:value = 'http://77.238.209.82:26331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bc404b-a6fd-29bf-7376-0000ba1797ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/i","pattern":"[url:value = 'http://77.46.170.18:53326/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b4bb80-aa30-5a70-3723-0000de7e5eb9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/i","pattern":"[url:value = 'http://88.116.62.226:52714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e71873-f2a8-f5b7-2d7b-00001eb47c95","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/i","pattern":"[url:value = 'http://206.214.35.106:20647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975576b2-a085-1116-e121-000050c8144c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/i","pattern":"[url:value = 'http://184.185.30.182:29029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5844c9-3c6c-53b5-be13-00009badbba8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.91.236.237:10713/i","pattern":"[url:value = 'http://213.91.236.237:10713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad21f1f-8a6c-c46a-d9a0-0000468b1caf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/i","pattern":"[url:value = 'http://41.78.75.186:30763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d88e3eab-223f-ed12-2a28-00006a9e42ad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.131.234.26:51118/i","pattern":"[url:value = 'http://202.131.234.26:51118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8054de7-cf0b-0e88-1ad7-00006d664694","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/i","pattern":"[url:value = 'http://212.98.186.8:6819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ba3536-cdec-cdbd-cb76-00005d154451","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/i","pattern":"[url:value = 'http://109.160.87.2:31378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9d16f2-18ae-fe1f-5534-0000d010b864","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/i","pattern":"[url:value = 'http://88.135.26.83:32710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c8e76-1bf4-9b00-6902-00002e659813","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/i","pattern":"[url:value = 'http://78.26.81.99:58230/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8f739-8613-8789-334b-00005c3cc7f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/i","pattern":"[url:value = 'http://176.221.111.222:2282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73be984d-bf6e-506e-ce4f-00001975c5d7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.57.69.125:16138/i","pattern":"[url:value = 'http://185.57.69.125:16138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11f4abc-952e-9f92-1107-0000bface811","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/i","pattern":"[url:value = 'http://203.160.56.67:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75b3810-8883-6fba-2583-00000376d2fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/Mozi.m","pattern":"[url:value = 'http://103.187.151.107:1500/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad9a08d-7fbe-5f2e-c7fc-00004c931bae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/Mozi.m","pattern":"[url:value = 'http://184.185.30.182:29029/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282116d3-cbdd-57dc-6ab6-00002b486b66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://121.43.104.75:8080/help.scr","pattern":"[url:value = 'http://121.43.104.75:8080/help.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--865de2ec-920e-f09b-11d5-00002d1cd0cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/Mozi.m","pattern":"[url:value = 'http://212.98.186.8:6819/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f993840-3609-97a9-a7e4-00001aa05ffa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/Mozi.m","pattern":"[url:value = 'http://91.92.82.180:17789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2776ee12-92d0-8635-b17c-0000924f38fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/Mozi.m","pattern":"[url:value = 'http://103.227.118.45:56789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93f450b0-5b6d-0ef9-9582-00003143d07c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/Mozi.m","pattern":"[url:value = 'http://78.26.81.99:58230/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31519ed3-a299-a51f-7b83-000088170800","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/Mozi.m","pattern":"[url:value = 'http://41.78.75.186:30763/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0c184c-68ee-e82e-f258-0000065be514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/Mozi.m","pattern":"[url:value = 'http://36.66.139.36:53736/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c7d2c7-0957-fb07-24eb-0000d6983514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/Mozi.m","pattern":"[url:value = 'http://203.160.56.67:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52325864-0de2-6e9a-36b2-0000011da0dc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/Mozi.m","pattern":"[url:value = 'http://176.221.111.222:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f57fde3-b35b-e030-53ca-00000bcf70df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/Mozi.m","pattern":"[url:value = 'http://77.46.170.18:53326/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3461dc1-1c41-5c89-270e-000004c83193","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/Mozi.m","pattern":"[url:value = 'http://213.6.74.138:39286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49024309-12cd-9945-4742-0000cefd0382","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.160.102.188:16079/Mozi.m","pattern":"[url:value = 'http://182.160.102.188:16079/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9541f4-24a8-07dd-97d4-00002fbc8742","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/Mozi.m","pattern":"[url:value = 'http://185.236.46.120:45209/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90061387-2685-ac08-3808-00009880ac9c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.218:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f296e91-0d02-5504-4990-0000b16b4903","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/Mozi.m","pattern":"[url:value = 'http://200.61.163.235:27538/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ac1ab3-f59b-f935-e7c1-00005c231017","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/Mozi.m","pattern":"[url:value = 'http://178.151.143.2:21623/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e4613c-7988-6c6a-7378-000002862515","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/Mozi.m","pattern":"[url:value = 'http://88.135.26.83:32710/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc4cdd0-cca5-e4ef-f6d4-00009ba2dfb8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/Mozi.m","pattern":"[url:value = 'http://178.211.135.170:12768/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b51b934d-c82a-4975-4120-00005c3d4bbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/Mozi.m","pattern":"[url:value = 'http://88.116.62.226:52714/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--181d644f-2df5-4eef-d7f3-0000ed274d31","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://183.81.156.121:12929/Mozi.m","pattern":"[url:value = 'http://183.81.156.121:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a7716b-451b-c9b7-8875-0000ce621fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/Mozi.m","pattern":"[url:value = 'http://41.77.74.90:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cc66d73-e3e2-7722-9950-00000095e1b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.134:10702/Mozi.m","pattern":"[url:value = 'http://154.0.129.134:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e683f2b-3d61-a5d2-93c2-0000dbd92f67","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/Mozi.m","pattern":"[url:value = 'http://81.16.242.236:28115/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b63845-9d7f-242f-f4cf-0000b7baa063","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/Mozi.m","pattern":"[url:value = 'http://89.231.14.137:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f851ed-3db4-4d32-017d-0000458a100f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/Mozi.m","pattern":"[url:value = 'http://186.154.93.81:8125/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc723566-7892-41a6-61a9-0000a4162066","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/Mozi.m","pattern":"[url:value = 'http://98.103.171.36:19021/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dede90b8-f37e-84d6-3325-00002f119f11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/Mozi.m","pattern":"[url:value = 'http://109.160.87.2:31378/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71e3e35a-f67a-fac7-c136-0000d90dfd54","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.203.50:40889/Mozi.m","pattern":"[url:value = 'http://118.179.203.50:40889/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0aae09-c209-912b-b376-00002bf606f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/Mozi.m","pattern":"[url:value = 'http://178.188.30.171:14759/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89a3c9f-6f27-e81b-d9ad-00006110b93e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/Mozi.m","pattern":"[url:value = 'http://95.158.175.214:23270/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb086f25-20d6-9c27-6181-0000264e3e14","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.217.215.238:17645/Mozi.m","pattern":"[url:value = 'http://103.217.215.238:17645/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c8ba2d-b69f-a4f3-b922-00004f769c3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/Mozi.m","pattern":"[url:value = 'http://185.12.78.161:36220/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352eb645-a755-95b4-a213-0000ec6e0e41","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/Mozi.m","pattern":"[url:value = 'http://109.87.223.241:39478/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517e5541-f624-e8ed-8ae1-0000f55f5722","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/Mozi.m","pattern":"[url:value = 'http://138.122.43.76:56486/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594a79cd-8ef0-a4d2-512b-000005f52ad5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/Mozi.m","pattern":"[url:value = 'http://206.214.35.106:20647/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda69d25-03f2-25dc-df40-000031aa3392","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/Mozi.m","pattern":"[url:value = 'http://181.211.252.34:1808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7c1368-98db-60a9-97b4-00008aeea37c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/Mozi.m","pattern":"[url:value = 'http://202.148.20.138:24291/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1309d001-299c-0758-7373-00000d505231","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.121.235:1123/Mozi.m","pattern":"[url:value = 'http://118.179.121.235:1123/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098afc35-cf2a-1949-709f-000063b2a653","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/Mozi.m","pattern":"[url:value = 'http://77.89.245.118:44811/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e85aab3-fc92-c15b-dea0-0000fa542615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/Mozi.m","pattern":"[url:value = 'http://103.90.207.234:55903/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac5c972-c506-9cde-8b9c-00005235a352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/Mozi.m","pattern":"[url:value = 'http://37.57.33.51:49049/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e658a7a-92a2-4862-f3b2-000051a44d70","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://195.34.91.22:61437/Mozi.m","pattern":"[url:value = 'http://195.34.91.22:61437/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f882049-8f25-c2e9-b572-0000fddadc1e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.255.217.87:32902/Mozi.m","pattern":"[url:value = 'http://37.255.217.87:32902/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a6823e-b330-d81a-d27b-0000ec837131","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/Mozi.m","pattern":"[url:value = 'http://190.113.124.155:64726/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fed1-8679-66ad-5627-00006dbd32c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.156:59323/Mozi.m","pattern":"[url:value = 'http://182.253.115.156:59323/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33e87e4-7a03-f3f7-1421-0000ef3e2e56","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/Mozi.m","pattern":"[url:value = 'http://202.5.50.108:15808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22267c8-4dcc-e8cf-4372-000094163e60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.220:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a30630-5ebd-a6c6-0624-0000c998f53c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/Mozi.m","pattern":"[url:value = 'http://124.194.46.204:44528/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a39fb9-d523-2421-cb98-000087ffe4af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/Mozi.m","pattern":"[url:value = 'http://181.49.47.190:46516/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1e6bde-a00e-23a3-9934-00000f67d265","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/Mozi.m","pattern":"[url:value = 'http://118.71.250.6:28411/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95c0690-99ad-26ba-16d5-00003de247ce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/Mozi.m","pattern":"[url:value = 'http://36.88.180.115:20043/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72d1747-0388-7ba1-23ed-0000c1ff06af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/Mozi.m","pattern":"[url:value = 'http://167.250.193.253:19901/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d7aed8-af74-96a9-702d-00005fdff707","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/Mozi.m","pattern":"[url:value = 'http://94.251.5.51:31559/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--255763b5-5fac-2f5e-d3d3-00008c3c8543","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/Mozi.m","pattern":"[url:value = 'http://109.108.84.121:28531/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1f3f98-81af-fc5f-c63e-0000d2a08b64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/Mozi.m","pattern":"[url:value = 'http://202.105.196.30:52286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a4ff9d-c2a5-60d1-ea02-00004322f46e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/Mozi.m","pattern":"[url:value = 'http://37.252.66.188:12165/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa3726d-fbe7-d170-3b2a-0000e6aff4f4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.212.35.175:8081/sshd","pattern":"[url:value = 'http://118.212.35.175:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e071eb-8851-e714-2793-0000c7efd002","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:85/sshd","pattern":"[url:value = 'http://178.183.205.197:85/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7c26-309a-b5f6-bbe4-0000da5825a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://14.161.6.225:8888/sshd","pattern":"[url:value = 'http://14.161.6.225:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0f3e32-f6a0-03a8-cf0f-000002e372a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10062/sshd","pattern":"[url:value = 'http://81.45.183.125:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd783586-d323-8861-4804-0000ed211999","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10072/sshd","pattern":"[url:value = 'http://81.45.183.125:10072/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05aba1c-13ca-ee9a-571a-000074dee1d2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.43.16.137:8093/sshd","pattern":"[url:value = 'http://185.43.16.137:8093/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef130b2d-22a8-e12b-a312-0000a3a908e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10097/sshd","pattern":"[url:value = 'http://213.96.13.100:10097/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eccb3265-4067-ddde-8e32-00005bac03c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8085/sshd","pattern":"[url:value = 'http://87.97.161.106:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea800426-0b5b-a4df-fbad-000041623932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8083/sshd","pattern":"[url:value = 'http://89.35.233.220:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92d178-9ba5-9afa-7477-000028b67a4a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8083/sshd","pattern":"[url:value = 'http://87.97.161.106:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0e1caa-09e8-7a33-fcde-00002156ed9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.203.169.41/sshd","pattern":"[url:value = 'http://92.203.169.41/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5f40cb-4259-ff07-7ccf-000062213f05","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8086/sshd","pattern":"[url:value = 'http://87.97.161.106:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409983ca-2c9e-4856-8585-0000f133b610","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.28.228.106:9014/sshd","pattern":"[url:value = 'http://80.28.228.106:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c147688-4d16-0b17-d6a1-000078ef05f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8080/sshd","pattern":"[url:value = 'http://89.35.233.220:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6afd433-d092-8f10-bc15-00007166a0c3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.191.89.122:1591/sshd","pattern":"[url:value = 'http://185.191.89.122:1591/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21dcd783-1b92-3462-f6d3-000056192d71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8082/sshd","pattern":"[url:value = 'http://89.35.233.220:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11900a4-67b8-9346-483c-00004e6c1863","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.130.160.219:37783/sshd","pattern":"[url:value = 'http://85.130.160.219:37783/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4740345-7e0d-fe7f-b67d-0000fe62ecc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:86/sshd","pattern":"[url:value = 'http://178.183.205.197:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69877983-df9c-7660-692f-00009a243422","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10094/sshd","pattern":"[url:value = 'http://213.96.13.100:10094/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b27f13e-7925-4590-d802-0000722ee898","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://166.147.146.187:8044/sshd","pattern":"[url:value = 'http://166.147.146.187:8044/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2132dc-4d08-bcb6-ca30-0000d1fccd0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.217.114:1026/sshd","pattern":"[url:value = 'http://109.207.217.114:1026/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc623c84-6da7-dff4-4eb9-0000c2058fb5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:51080/sshd","pattern":"[url:value = 'http://212.3.211.157:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4346c2c7-3570-4fd5-d872-000006e59441","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.216.197:1031/sshd","pattern":"[url:value = 'http://109.207.216.197:1031/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c19ef30a-46a1-d7c6-af77-0000d1c7cc84","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://data.yhydl.com:20006/file/XW_Setup.exe","pattern":"[url:value = 'http://data.yhydl.com:20006/file/XW_Setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc24820-1e18-e19e-57f0-000081f16504","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/x.rar","pattern":"[url:value = 'http://119.192.128.163:28080/docs/x.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f86c17-70b4-947f-5e4f-00009731ae0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/solr.sh","pattern":"[url:value = 'http://119.192.128.163:28080/docs/solr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18041886-98ca-95ce-97e8-000094b87ec4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.152.219.150:8182/tftp","pattern":"[url:value = 'http://185.152.219.150:8182/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab940d12-d73a-2bdc-08cf-0000a9181b0b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.247.218.186:49052/i","pattern":"[url:value = 'http://103.247.218.186:49052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f65b6c-d514-5e67-9c79-0000b82aa4dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://154.73.64.24:41934/i","pattern":"[url:value = 'http://154.73.64.24:41934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa716c34-1a67-597c-e552-0000395e6d19","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.171.188.254:17418/i","pattern":"[url:value = 'http://181.171.188.254:17418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44895c92-a11b-b94c-ab34-0000888b00a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.255.216.26:25260/i","pattern":"[url:value = 'http://43.255.216.26:25260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01aea97b-5dfd-44e2-2933-0000e2794b51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://159.250.122.151:8081/Photo.scr","pattern":"[url:value = 'http://159.250.122.151:8081/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dc7012-b048-7a75-20a4-00004b8ed5b1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.ppc","pattern":"[url:value = 'http://103.163.119.220/Aqua.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a24f8c-0b26-be71-16a4-000053603646","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.arm5","pattern":"[url:value = 'http://103.163.119.220/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c019-2322-8636-1254-000097704d94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE","pattern":"[url:value = 'http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f22b35-cf92-6d53-f2ff-0000f3150c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.x86_64","pattern":"[url:value = 'http://103.163.119.220/Aqua.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c6acf74-bf6a-6276-d7bd-0000468bc689","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.dbg","pattern":"[url:value = 'http://103.163.119.220/Aqua.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac71dec-2185-16e7-cd6e-0000aee257cf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.85.166.12:22448/.i","pattern":"[url:value = 'http://212.85.166.12:22448/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99304d82-5a08-2227-0ca5-000075c98b3d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/.i","pattern":"[url:value = 'http://93.87.31.84:40955/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7688ded-6c8f-4a5b-0549-0000980809e6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/.i","pattern":"[url:value = 'http://89.216.107.99:65414/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031524f2-c7b4-b24b-4b11-0000de03e75e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/.i","pattern":"[url:value = 'http://216.155.92.203:3956/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48c3ea9-5821-31f8-31a7-00008714f7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/.i","pattern":"[url:value = 'http://47.49.114.179:27254/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9d45b6-9b34-460e-163c-0000361593cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://186.138.107.5:14491/.i","pattern":"[url:value = 'http://186.138.107.5:14491/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67f8dbb6-c34c-e60d-28ec-0000e40fa191","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mpsl","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71553755-29cf-8ab3-be4f-00001507accb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm6","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85c66ef-935f-7bb5-5c8a-000007b20325","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm5","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22a1d7f-c2a9-99b9-f38c-00008f0ccfdb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mips","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065207c3-bf1b-5ae4-c96d-0000adbbcbae","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm7","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7add5d8-13c0-d914-e8b3-000023c4cffe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.mips","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c471893-ee55-727b-9031-000061800f01","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a42d9e51-2008-9d15-eb84-00003315fa6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.ppc","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d5cf64-f257-6c30-ab1f-00000173cb8b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm7","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddbae48-276e-6356-b779-0000ab7a0300","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm5","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899faf9f-a743-8168-0c2f-00004b169419","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.x86","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b65ae12-3603-885f-0141-0000e688365b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O","pattern":"[url:value = 'https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9a8b54-220d-0158-755c-0000576ef8c5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.73.75.82:33920/i","pattern":"[url:value = 'http://212.73.75.82:33920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dece9c7f-d7a6-7d59-f234-00000af340bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/i","pattern":"[url:value = 'http://93.87.31.84:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e88b94-4840-9f14-1baf-000078ca7ea1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8051/sshd","pattern":"[url:value = 'http://195.34.102.234:8051/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7cdde8e-d048-4d9c-c1bc-0000e5b3256f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.88.189:802/sshd","pattern":"[url:value = 'http://2.54.88.189:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8009109-00f6-9bea-ffc3-000093fdc5a2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8061/sshd","pattern":"[url:value = 'http://195.34.102.234:8061/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edbb2c-0245-2e28-353c-00001cab1368","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8056/sshd","pattern":"[url:value = 'http://195.34.102.234:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135c42ac-b454-1520-4279-00008486d1e1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8060/sshd","pattern":"[url:value = 'http://195.34.102.234:8060/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69ae403-f41f-40e4-d678-0000dcf8b7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30460/sshd","pattern":"[url:value = 'http://117.240.155.245:30460/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d294ea-1083-a8a5-2c13-00002df3ec7e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30490/sshd","pattern":"[url:value = 'http://117.240.155.245:30490/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5c010-8650-1ccd-bf02-0000d5131789","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30420/sshd","pattern":"[url:value = 'http://117.240.155.245:30420/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b2779d-3f6e-58d7-8047-000044ac539c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.247.101.63:2000/sshd","pattern":"[url:value = 'http://117.247.101.63:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733dda8d-a362-fcba-112e-00003e24ac8a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30410/sshd","pattern":"[url:value = 'http://117.240.155.245:30410/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a59f5e-0e8e-3ce6-50f5-0000c2318740","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30480/sshd","pattern":"[url:value = 'http://117.240.155.245:30480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec609647-e0b4-7b3a-062a-0000eb0a92c3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30380/sshd","pattern":"[url:value = 'http://117.240.155.245:30380/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f8d394-1bb4-2376-182d-0000171fb909","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30310/sshd","pattern":"[url:value = 'http://117.240.155.245:30310/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411df719-6e6a-f5ef-dca0-0000df7ac6b3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30250/sshd","pattern":"[url:value = 'http://117.240.155.245:30250/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a35ce74-bdf0-d422-5cea-0000a444bbcb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30120/sshd","pattern":"[url:value = 'http://117.240.155.245:30120/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a2cba4-27cf-cc57-9526-00003ad17cb7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30430/sshd","pattern":"[url:value = 'http://117.240.155.245:30430/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee67c2bd-3f6e-e4ea-8635-000013ea6934","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30330/sshd","pattern":"[url:value = 'http://117.240.155.245:30330/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e5fb4e-bae7-cafa-0279-0000a95acb8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30140/sshd","pattern":"[url:value = 'http://117.240.155.245:30140/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c440df58-9a58-c1fc-b90c-0000e6a5a222","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://111.74.21.155:5011/sshd","pattern":"[url:value = 'http://111.74.21.155:5011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa6b585-ab29-149c-63e6-0000b58fc0ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/i","pattern":"[url:value = 'http://47.49.114.179:27254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06cf6e58-532e-1060-fc82-0000667ca3a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.93.83.124:11028/i","pattern":"[url:value = 'http://182.93.83.124:11028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828da79d-f40e-891b-ca8a-000073f2bb3c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/i","pattern":"[url:value = 'http://89.216.107.99:65414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c902843d-83d1-f8a8-0757-000069240fc7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.244.113.217:53408/i","pattern":"[url:value = 'http://94.244.113.217:53408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c3b92c-dc72-695d-f563-0000f24b7cd4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14.0.204.188/sshd","pattern":"[url:value = 'http://14.0.204.188/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40abc838-90d4-bd3e-7213-00009c29d6e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.142.63.8:24860/i","pattern":"[url:value = 'http://94.142.63.8:24860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22481751-890c-8bf8-e1b3-0000e48c4c3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-64bit.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-64bit.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ec8f00-cd71-1d12-8890-0000e1d16f3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-arm.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-arm.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7c314-c392-8fc5-a8b2-000017398d69","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1192/sshd","pattern":"[url:value = 'http://62.56.225.99:1192/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8b10b1-4b9b-dec3-b388-00000042992a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1193/sshd","pattern":"[url:value = 'http://62.56.225.99:1193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5388d9-6cfa-0413-9cf1-000077165962","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png","pattern":"[url:value = 'https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2f9244-5159-a6e2-fcdd-00006b43b55f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.20.19.72:8009/sshd","pattern":"[url:value = 'http://185.20.19.72:8009/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561d0cf8-af9c-d2c2-2ee7-000080124445","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.215.129.223/sshd","pattern":"[url:value = 'http://117.215.129.223/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ff8213-9a2a-50e2-eb88-0000cea14d52","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9011/sshd","pattern":"[url:value = 'http://92.66.30.68:9011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13213a0-af57-2327-1669-00008436081d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9014/sshd","pattern":"[url:value = 'http://92.66.30.68:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6ec005-d842-324b-ba06-0000934d1c5e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9015/sshd","pattern":"[url:value = 'http://92.66.30.68:9015/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913cc96c-c4dc-1907-affc-000080ec67fb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:28888/sshd","pattern":"[url:value = 'http://182.109.0.22:28888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4cb1d9-cd7f-4886-cfac-0000f49ad91e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10014/sshd","pattern":"[url:value = 'http://80.11.36.4:10014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab53d6a-47b6-55fb-28ea-000060d5044f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.58:37379/i","pattern":"[url:value = 'http://222.165.237.58:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44145afe-eeb6-d180-fb50-000011a27a93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/i","pattern":"[url:value = 'http://216.155.92.203:3956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdce2929-fae4-6e3f-9c91-0000fb704820","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.59:37379/i","pattern":"[url:value = 'http://222.165.237.59:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5a2471-0279-08b9-ac34-0000db131e7f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.60:37379/i","pattern":"[url:value = 'http://222.165.237.60:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac0cf7-f6c5-3417-7117-0000372880e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.62:37379/i","pattern":"[url:value = 'http://222.165.237.62:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0b726f-eec0-3921-1a3e-00003d260b35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:18888/sshd","pattern":"[url:value = 'http://182.109.0.22:18888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0eded6-0acf-d596-b183-00008571c994","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8081/sshd","pattern":"[url:value = 'http://178.183.70.63:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c67fdd-6691-8681-493a-0000ab87e112","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8083/sshd","pattern":"[url:value = 'http://178.183.70.63:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59f9cc0-5049-1afd-3aae-0000d89d9898","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8085/sshd","pattern":"[url:value = 'http://178.183.70.63:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23067311-f721-e4e5-c8ce-000004e303ca","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://46.175.139.20:11074/i","pattern":"[url:value = 'http://46.175.139.20:11074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3068efac-1909-d0e9-8370-0000be9be7d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.159.221.33:9269/i","pattern":"[url:value = 'http://103.159.221.33:9269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38313782-54e0-397b-ddd2-0000d71e2a76","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.22:65481/i","pattern":"[url:value = 'http://114.31.8.22:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c8644b-2fbc-83ee-67fe-00001c97c34b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://twitch.tj/","pattern":"[url:value = 'https://twitch.tj/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8e71a2-3d74-9b82-7472-000012ae2a0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10018/sshd","pattern":"[url:value = 'http://80.11.36.4:10018/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2682e06-5ded-8b7a-2599-0000b895d9e8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/armv7l","pattern":"[url:value = 'http://198.166.72.242/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2157227c-e38e-bf86-0def-0000fb2056cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/arm7","pattern":"[url:value = 'http://198.166.72.242/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de6ddbb-22a7-1fa0-f67e-00004082a87d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/aarch64","pattern":"[url:value = 'http://198.166.72.242/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389ba5d5-9f10-9e27-ee12-0000cb99b02d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/libmod_hellocpp_42.so","pattern":"[url:value = 'http://47.89.173.214:8888/libmod_hellocpp_42.so']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b209fd3f-8f31-c9ba-4afe-0000038fc0e5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/asdf","pattern":"[url:value = 'http://47.89.173.214:8888/asdf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0705c69f-5302-5d1b-e483-0000eff33e23","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/ffff","pattern":"[url:value = 'http://47.89.173.214:8888/ffff']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f356af5-30ca-c433-03fa-00008ed8b314","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/xxxx","pattern":"[url:value = 'http://47.89.173.214:8888/xxxx']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b3a50b-167f-5859-b428-0000793b008d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048b71b7-9d19-1093-0502-00007829bf20","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mipsle","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e348a7cf-87d7-8eca-51a5-0000f7c477bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b9d7885-7eb8-e7ab-8065-00007ad080e9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm8x64_be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm8x64_be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ea98aa-2994-e4c8-a786-0000d9de967a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.42.154:40955/i","pattern":"[url:value = 'http://93.87.42.154:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f001759c-6e2c-4513-d1be-00002530b9ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64le","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83b5657-53d6-0a7e-4f9f-0000c06f6e95","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://95.62.202.150:10071/sshd","pattern":"[url:value = 'http://95.62.202.150:10071/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f72e4b0-29f0-5c59-15a8-0000b5319d29","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.89.62.19:63814/i","pattern":"[url:value = 'http://36.89.62.19:63814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b182f2-9287-40cc-16e2-0000f7e59b94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://112.4.110.28:37780/sshd","pattern":"[url:value = 'http://112.4.110.28:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f2f7c9-0afc-ada9-4a87-000062460c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64len32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64len32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cf0fbd-d9b4-c819-193d-0000b5b3ebb4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2e57f4-e656-38f7-f073-00006f975845","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64e6500","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ecf2fa-06c4-ccda-2f62-0000c3139ed5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv4","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe293d6-211e-4f70-617c-0000691a565e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv6","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bc06a4-4a38-cd61-b649-0000be8ae80a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38135356-5e31-c65a-1bd2-0000896f58dd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl1001","pattern":"[url:value = 'http://31.170.22.205/dl1001']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102fccb-1987-04c5-6228-00003f8bf3a3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca79925b-94d2-8d51-eafc-0000fe31a535","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d02598-17fd-45f1-6db7-00006956ae24","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64lepower8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64lepower8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5620b9-0f1f-cedd-90e9-0000297550ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64power8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64power8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ab0e4f-123d-7ff5-481f-00005037d889","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.riscv32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.riscv32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5a340-014c-1717-459f-0000d1a6313b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60da79-b30e-ddb8-0e68-000099335a77","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arcle750d","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arcle750d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a433bb-3f2b-31e9-2837-000018ad567f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.i686","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e807a-b97c-820b-658e-00001a404c75","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpce500mc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpce500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf94eab-0289-3172-fee4-00008bc0df10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64n32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64n32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b19f5dd-b554-6baf-b3ef-00007c875e6e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl18","pattern":"[url:value = 'http://31.170.22.205/dl18']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf0bb4fb-6de3-440c-a82b-00005a9c6b14","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mips","pattern":"[url:value = 'http://160.187.146.122/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f327802d-e556-1ab5-6fe8-00005a6abdce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/m68k","pattern":"[url:value = 'http://160.187.146.122/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb9fbda-522a-04d4-5ec4-0000319dc6cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/spc","pattern":"[url:value = 'http://160.187.146.122/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c749ed1-f804-9b65-48a9-0000c0970804","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm6","pattern":"[url:value = 'http://160.187.146.122/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24d744d-bc36-dd29-1b5d-0000cf0ada10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/x86","pattern":"[url:value = 'http://160.187.146.122/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfff4583-8616-de07-d90a-0000b709b465","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/ppc","pattern":"[url:value = 'http://160.187.146.122/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad97232-db2f-fd97-1a36-0000319f055e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mpsl","pattern":"[url:value = 'http://160.187.146.122/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857dcf6b-ec32-2819-7d4a-0000d222a7ea","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm5","pattern":"[url:value = 'http://160.187.146.122/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beef2e2c-a8d4-e53e-bfd0-0000fe930c51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl20","pattern":"[url:value = 'http://31.170.22.205/dl20']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b49c2a2-8d8b-bc7a-187f-0000d84680d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/c.sh","pattern":"[url:value = 'http://160.187.146.122/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5432026a-14e7-2f6d-6655-00004bd7380e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/w.sh","pattern":"[url:value = 'http://160.187.146.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ecdf4f-c14a-68f8-93d2-000020acf817","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.64.14.250:38834/i","pattern":"[url:value = 'http://36.64.14.250:38834/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8100335d-1ad0-d610-0cb1-000064799dfc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://82.102.74.238:36868/i","pattern":"[url:value = 'http://82.102.74.238:36868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7f6e19-6712-9752-56d2-0000dc45f7bf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.210.214.48:9814/i","pattern":"[url:value = 'http://178.210.214.48:9814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa55ad-56d9-3efc-0c9b-0000d41968fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.43.17.123:8083/sshd","pattern":"[url:value = 'http://185.43.17.123:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c1b7d9-3348-22b8-537a-000031c981b8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.60.216.19:65020/i","pattern":"[url:value = 'http://179.60.216.19:65020/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fff2597-44f2-bf3a-9f9f-0000c9dbd4ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.60.246.15:16794/i","pattern":"[url:value = 'http://181.60.246.15:16794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e674ff66-4da8-d40f-8950-00007c60ba8d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.57.122.121/mig","pattern":"[url:value = 'http://2.57.122.121/mig']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d8058e-d257-bcd4-cfb8-0000eaa2ddc5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/ns3.jpg","pattern":"[url:value = 'http://162.215.218.82/ns3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2792de92-e3a6-a23f-50f0-00000b5b33ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.229.20.42:2874/i","pattern":"[url:value = 'http://43.229.20.42:2874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8874502-24d2-ff9d-9fab-000009203ccb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.160.116.52:57196/i","pattern":"[url:value = 'http://182.160.116.52:57196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc2bddb2-5037-3d1c-335a-0000aa862d0e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.182.77.20:86/tftp","pattern":"[url:value = 'http://93.182.77.20:86/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1886ff-b17b-7fe1-e15d-0000345bd673","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.136.63.232:92/tftp","pattern":"[url:value = 'http://2.136.63.232:92/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50aaf8d7-fe36-de4e-545b-000096d64708","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://61.244.254.110:37903/tftp","pattern":"[url:value = 'http://61.244.254.110:37903/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a46d839-ec56-2f5c-074a-000009923019","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.63.168.2:8082/tftp","pattern":"[url:value = 'http://179.63.168.2:8082/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db72d22-8e55-aa3a-80ec-0000ba90abdd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.226.241.197:5003/tftp","pattern":"[url:value = 'http://77.226.241.197:5003/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b2125e-9436-6760-a5ee-0000cfcfe446","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://188.243.36.33:8082/sshd","pattern":"[url:value = 'http://188.243.36.33:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a807d3e3-1c9e-d971-228b-00006ba32880","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/oto","pattern":"[url:value = 'http://162.215.218.82/oto']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1cf29d-30b7-8968-0495-00003336b193","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://213.47.243.57:48784/i","pattern":"[url:value = 'http://213.47.243.57:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613fa6b1-75b1-7cbb-5ce4-00007ed1e7ba","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://139.162.53.175:685/Mozi.m","pattern":"[url:value = 'http://139.162.53.175:685/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef77204a-e6d2-8b65-3fa6-0000d29e8d6a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.110.37.104:48784/i","pattern":"[url:value = 'http://80.110.37.104:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f63296-ff52-d13a-2e8a-0000b44682cd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/debug.dbg","pattern":"[url:value = 'http://160.187.146.122/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab0d13a-8ff2-0714-fba1-00008ec862a0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://37.252.69.10:58829/i","pattern":"[url:value = 'http://37.252.69.10:58829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943584c7-4f7b-8d24-6b82-000069ca5c93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.57.30.25:7580/sshd","pattern":"[url:value = 'http://85.57.30.25:7580/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef77aa0-9ff0-88d9-efdb-0000db07eee3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://78.36.11.185:1080/sshd","pattern":"[url:value = 'http://78.36.11.185:1080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c505a4b-558a-155b-4875-0000a386c3f9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.25:65481/i","pattern":"[url:value = 'http://114.31.8.25:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574af2ee-882c-ff00-be5b-0000e78993e2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://115.127.68.162:55090/i","pattern":"[url:value = 'http://115.127.68.162:55090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83465252-70f0-0f25-8c47-00008c7c6480","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.201:26818/i","pattern":"[url:value = 'http://202.40.178.201:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d2efa6-2d91-7829-5514-000098b83844","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.226:26818/i","pattern":"[url:value = 'http://202.40.178.226:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb23183-6482-00f4-ae2c-0000f437358a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.sh4","pattern":"[url:value = 'http://160.187.146.122/where/botx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528a5516-9e63-a892-f29f-0000267c5911","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff93a9f3-d528-b75f-a3c6-000055374d86","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mpsl","pattern":"[url:value = 'http://160.187.146.122/where/botx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066d5bec-57fc-145d-7851-00003ec2f516","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.m68k","pattern":"[url:value = 'http://160.187.146.122/where/botx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a416f3a-06d9-0936-5f5c-00003e3423cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mips","pattern":"[url:value = 'http://160.187.146.122/where/botx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703714aa-d8ab-59ce-c4af-0000b68aef32","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm5","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a8e9df-9ac3-affa-05a2-00002512547a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/wget.sh","pattern":"[url:value = 'http://160.187.146.122/where/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7df99e-f960-b029-4a66-0000e83187ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8201/sshd","pattern":"[url:value = 'http://81.22.42.232:8201/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b0132f-f045-1d6b-fe12-00006de9b608","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.107/sshd","pattern":"[url:value = 'http://121.202.208.107/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e548ee-c9f5-6282-44a4-0000bfca6be7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8013/sshd","pattern":"[url:value = 'http://201.94.181.7:8013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928d95d-4859-46a8-08ea-0000f55d2ea8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8016/sshd","pattern":"[url:value = 'http://201.94.181.7:8016/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e07856-1552-262b-37ef-0000dbab062e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8014/sshd","pattern":"[url:value = 'http://201.94.181.7:8014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3a43d-d675-2926-95da-00000d74c9db","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.209.31/sshd","pattern":"[url:value = 'http://121.202.209.31/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad70e51-1bfc-183d-24d0-00001f3c6b0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.237/sshd","pattern":"[url:value = 'http://121.202.208.237/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae98b30-1250-7107-2445-0000d1bcbb28","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8202/sshd","pattern":"[url:value = 'http://81.22.42.232:8202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba0c0c97-5543-cd25-8942-0000a929e846","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/sora.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f2fe88-6cbe-2264-97fc-0000c2dc50d6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6203841-7254-419a-d7b1-0000a9df3e9c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mips","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d34b265-73c1-4c10-35d1-00004d2d7477","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/sora.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555e34a7-cb67-5bdb-6f4c-00001fb8811a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555f126b-63af-9e34-19cb-000033d45d8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c57b20d-8f5b-a785-a7bc-0000df52debc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/w.sh","pattern":"[url:value = 'http://160.187.146.122/bins/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f32c72c5-56ac-829a-f551-00004cc36661","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/c.sh","pattern":"[url:value = 'http://160.187.146.122/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--410b8fec-ad07-3f2a-36c4-00007f473127","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mpsl","pattern":"[url:value = 'http://160.187.146.122/where/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c843ef1-7383-1eac-f426-0000eb600071","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/sh4","pattern":"[url:value = 'http://160.187.146.122/where/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d94925-7556-fbbc-99db-000014445f6d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mips","pattern":"[url:value = 'http://160.187.146.122/where/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d6dca6-dd98-6ab5-3af2-00006bbe9987","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/ppc","pattern":"[url:value = 'http://160.187.146.122/where/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2464ed68-39bd-d51e-6ee0-000013bdf7f2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86","pattern":"[url:value = 'http://160.187.146.122/where/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaf32b5-24d6-9bcb-24cf-00009cfa9393","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm5","pattern":"[url:value = 'http://160.187.146.122/where/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f57df3-8742-be5f-f034-000014b289b7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/m68k","pattern":"[url:value = 'http://160.187.146.122/where/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702d9a17-055c-61a1-595a-0000236ecece","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a0f26e-d29e-f967-27e4-000046638310","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.sh4","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d87ad7ea-a9db-a880-f48d-00002eaadbfa","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f21039-2a41-5cb3-f860-0000c6bd1ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b4ae60-2e94-28e9-647f-000040296848","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.spc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c26703-a7bb-38ca-9c9f-0000a9e6a5dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86_64","pattern":"[url:value = 'http://160.187.146.122/where/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a15399-b681-a5fd-4cb6-000036f35b18","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm7","pattern":"[url:value = 'http://160.187.146.122/where/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae2098ac-5818-ffc5-73b4-0000a6e2c1de","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac1e462-4ab7-b1ad-612e-000069549e54","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f38e5141-6831-d1fc-88ec-00002c8e6098","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm7","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218425f5-4b16-7bb8-e5f9-0000455f636a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92248d34-8145-ceac-d14f-0000653a0aa7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2664198-3a49-15be-c4c9-00004ac5163d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.spc","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848961d7-2091-369e-6a78-0000943207fd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d80306d-ae3b-222e-8de3-00008687a813","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bda7f2b-cf9d-68c0-de04-00000ecfb237","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd92ce0f-b353-ff3e-9b5b-0000b4520ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a7903-fb5b-33f2-c91a-00009ec491fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6ca4c4f-c999-b523-9f7b-0000a8cda452","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.50.222.238:51680/i","pattern":"[url:value = 'http://77.50.222.238:51680/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664efe84-2e68-3fbb-ce59-000009115630","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.239.98:802/sshd","pattern":"[url:value = 'http://2.54.239.98:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e707999-2c94-d5e8-a7e2-0000a84c755c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.204.105.97:30802/i","pattern":"[url:value = 'http://85.204.105.97:30802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90bd54ad-02da-8017-9348-00004ed1dc6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://87.119.108.21:40462/i","pattern":"[url:value = 'http://87.119.108.21:40462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b735449a-5799-da74-c2e9-0000c654361d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://183.91.77.253:19833/i","pattern":"[url:value = 'http://183.91.77.253:19833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6384224e-6dbe-fa42-3d27-0000c315e41e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.98.176.195:8022/sshd","pattern":"[url:value = 'http://201.98.176.195:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0004dad-0597-260e-0605-00006001ba35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.84.143:802/sshd","pattern":"[url:value = 'http://2.54.84.143:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb914ea-2475-e023-8ca7-0000cc10ccce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.193/sshd","pattern":"[url:value = 'http://121.202.208.193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2e7183-072c-e26b-a6ad-0000fdf7a502","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14-0-204-188.static.pccw-hkt.com/sshd","pattern":"[url:value = 'http://14-0-204-188.static.pccw-hkt.com/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450906ac-67cc-4715-c9f7-00000b92fecd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://223.83.211.82:8000/sshd","pattern":"[url:value = 'http://223.83.211.82:8000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10808ec3-05ed-1785-1ddc-00002f275b42","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.26.97.59/sshd","pattern":"[url:value = 'http://195.26.97.59/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3938239b-c471-d58a-7d1b-0000939bdd79","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://202.88.234.44:64615/i","pattern":"[url:value = 'http://202.88.234.44:64615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf40096a-d057-1a44-348d-00001628f13e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://93.116.56.78:3976/i","pattern":"[url:value = 'http://93.116.56.78:3976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ef2705-c955-fd0c-239b-000018cdca0c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://31.28.31.6:50871/i","pattern":"[url:value = 'http://31.28.31.6:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b04175-5265-b35d-b281-0000844f22ca","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://191.33.171.242:55443/i","pattern":"[url:value = 'http://191.33.171.242:55443/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c279b0d-8a13-15c5-11e9-0000cb11303b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff13f38-ef55-ce88-635b-00004c6a193f","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7899769-6bba-13de-76fc-0000191492bf","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc85eccc-a699-21a8-080c-000003dae119","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28665217-981a-7128-0dc1-0000c1430bc8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b01688e-b9a8-a5d3-bae3-0000c5fea246","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac15f6ae-64df-d4b7-7af4-000008ab97b8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b37a6c9-6691-d063-9562-00002ae8561a","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://47.96.106.127:8890/02.08.2022.exe","pattern":"[url:value = 'http://47.96.106.127:8890/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef6e4a4-d5a4-4b00-9010-000044cbd1fd","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:83/sshd","pattern":"[url:value = 'http://90.8.83.87:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976e93b9-6ecc-7495-90e0-0000ce9f1520","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87/sshd","pattern":"[url:value = 'http://90.8.83.87/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f8459-7ab7-8419-b646-0000a8448353","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://85.57.30.25:7480/sshd","pattern":"[url:value = 'http://85.57.30.25:7480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633e45af-ce91-284e-cd98-00006a3df97b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:81/sshd","pattern":"[url:value = 'http://90.8.83.87:81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b882f4-bd09-8b48-1d06-00008ab45f87","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.142.68/sshd","pattern":"[url:value = 'http://121.202.142.68/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabc1d44-d8f5-027e-ae9d-0000be5ef3f3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.153.132/sshd","pattern":"[url:value = 'http://121.202.153.132/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe92ed87-7256-f170-4020-0000e5dd379c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.141:2000/sshd","pattern":"[url:value = 'http://61.2.45.141:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ee5976-2862-a627-59d5-000088c1783e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.172:2000/sshd","pattern":"[url:value = 'http://61.2.45.172:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51175c9f-5b9d-583c-8c0d-000097e42dad","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.247.2.226:48894/i","pattern":"[url:value = 'http://177.247.2.226:48894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52beabcd-11e3-5a10-59fe-00000c2bbb46","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.236.116.198:23704/i","pattern":"[url:value = 'http://45.236.116.198:23704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26364721-fa19-06aa-463e-0000bd7b2504","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://24.37.71.230:54401/i","pattern":"[url:value = 'http://24.37.71.230:54401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f72898-64ce-e08d-0f08-000079f265f7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://88.24.52.121:10062/sshd","pattern":"[url:value = 'http://88.24.52.121:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b47b19f7-db31-9f15-34ac-0000182a21e3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://91.147.91.21:23459/i","pattern":"[url:value = 'http://91.147.91.21:23459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6625d862-64fb-8c49-3383-0000bdc0c1d6","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.196.93/sshd","pattern":"[url:value = 'http://121.202.196.93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e909afa-567f-8abf-a3b9-0000378442f2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://130.61.147.74/bot.zip","pattern":"[url:value = 'http://130.61.147.74/bot.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb15f2db-9a70-2d01-acae-00003efdf860","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://34.70.102.215/linpeas.sh","pattern":"[url:value = 'http://34.70.102.215/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d466cd-aedb-65ef-3828-0000df189ae9","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: https://1h.vuregyy1.ru/4pi3llms81.hta","pattern":"[url:value = 'https://1h.vuregyy1.ru/4pi3llms81.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eaf837a-dd85-4e3a-c161-0000fbd7ddf7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://95.43.76.100:43118/.i","pattern":"[url:value = 'http://95.43.76.100:43118/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1b90535-dc64-f341-f000-0000191c9d09","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://2.55.126.179:802/sshd","pattern":"[url:value = 'http://2.55.126.179:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0bf015-6cfb-5695-50f6-00006df51c0e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.93.200.20:2260/i","pattern":"[url:value = 'http://103.93.200.20:2260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbde383-e3d6-d06b-4a44-0000d7868f22","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://181.129.100.123:30581/i","pattern":"[url:value = 'http://181.129.100.123:30581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee9e4a4-fda1-2e93-a822-0000c9c3dc18","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://183.81.156.125:12929/i","pattern":"[url:value = 'http://183.81.156.125:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b694493-367b-3c1e-07d6-0000ab581081","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.115.254.91:32515/i","pattern":"[url:value = 'http://45.115.254.91:32515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e60be9e-7be7-9ced-25a7-0000340f3254","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37782/sshd","pattern":"[url:value = 'http://36.154.188.50:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a81f95-e745-c746-c920-00001af91ad2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37780/sshd","pattern":"[url:value = 'http://36.154.188.50:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8f0477-69e0-c6be-7366-0000bca360d2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://188.95.148.167:9393/sshd","pattern":"[url:value = 'http://188.95.148.167:9393/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e708a0-b820-e01d-7fe5-0000dbb9e5af","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.48.13.117:21861/i","pattern":"[url:value = 'http://178.48.13.117:21861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4778ec3-c53d-6830-d5ac-00000cfe3c59","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.112.126.123:1600/i","pattern":"[url:value = 'http://45.112.126.123:1600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f57b8ba-cb24-f468-2521-0000e5acde80","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.220.234.5:53133/i","pattern":"[url:value = 'http://178.220.234.5:53133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a750e95f-cadd-bd29-33a4-0000774135d5","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f605a9e1-b69a-9a8a-d783-000053f90ce0","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Photo.lnk","pattern":"[url:value = 'http://103.8.164.18/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83385531-0e85-5d07-6ec9-00003e11db05","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Video.lnk","pattern":"[url:value = 'http://103.8.164.18/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d9b86-46ea-f31d-ea6f-0000c6a42d10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.246.178.42:62425/i","pattern":"[url:value = 'http://188.246.178.42:62425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63752de4-c1f3-3807-dc06-00005ad8e2ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.lnk","pattern":"[url:value = 'http://80.147.155.189/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1648d134-5c43-911c-fe07-000037303508","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.lnk","pattern":"[url:value = 'http://80.147.155.189/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a6a7d-e523-342d-ba2e-0000879da53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/Install/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/Install/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c88cd-9a09-4104-7ef5-0000b1342e9c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/RelFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/RelFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c825e47-b54d-1a43-3724-0000a62d4c51","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/ExeFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/ExeFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53044cf-be70-dc7f-1eb7-0000dc492e8b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/GdbFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/GdbFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2f2b1a-7d43-f44e-bb68-00003866a357","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.25.123.70:8080/sshd","pattern":"[url:value = 'http://109.25.123.70:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a528a2f5-2924-d6cf-f8dc-0000eefd82a1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.234.234.14:16507/i","pattern":"[url:value = 'http://45.234.234.14:16507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e5ae0b-635d-ef87-b643-000018c72d28","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/i","pattern":"[url:value = 'http://50.43.160.231:38064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d286872-14a1-2185-3e8d-00003b92b0a8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.173.101.114:10000/swt","pattern":"[url:value = 'http://107.173.101.114:10000/swt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8053aa22-5740-6562-ba6b-00006935838d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.90.122.2:36364/i","pattern":"[url:value = 'http://116.90.122.2:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60418e02-aecb-b665-ba46-000053295563","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/2","pattern":"[url:value = 'http://178.16.54.109/2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5289c0-b144-8c5b-cb68-00000afdc098","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/i","pattern":"[url:value = 'http://36.64.227.134:63289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2819ed06-af6f-e280-d8a8-00007f401c55","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://117.72.242.9:9999/02.08.2022.exe","pattern":"[url:value = 'http://117.72.242.9:9999/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df80180-f64e-588f-c125-0000bf3e151c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.lnk","pattern":"[url:value = 'http://80.147.155.189/AV.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ca1f24-621f-6e4a-2551-00007dd98e07","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.scr","pattern":"[url:value = 'http://80.147.155.189/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f7e3f4-7612-fa53-6486-0000103159e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.scr","pattern":"[url:value = 'http://80.147.155.189/Video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b473340-9e3c-3ad8-b358-0000983f79f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.scr","pattern":"[url:value = 'http://80.147.155.189/AV.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1115c62d-2bb0-32cf-9905-0000349e042f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.77.244.174:8602/info.zip","pattern":"[url:value = 'http://220.77.244.174:8602/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e72eef-bdf7-42d4-a8a4-000063a1ace7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8b07df-25f2-bf4b-b310-00004788fb41","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445c0f5f-1510-6ff0-d7d7-000076d32d77","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--304ebef7-b2cd-fba2-9761-0000afdfcf6a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c676cfea-95cf-1fa2-b190-0000a5070f96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb706cec-3b6c-bd14-89bf-0000cdc33916","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdbcea3e-bc41-ed46-a3e7-0000bcc56948","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3594e545-4144-1054-ae4c-0000564c5a44","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e01e3f4-3c51-b604-e5cd-000044ef0e35","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951953c5-2611-897d-1d22-000096efb7c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c59f133-050c-8c71-825e-0000cd4b2747","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c52e5aa4-34a2-afbb-c063-0000b68508c6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3305c435-b6d7-e5b9-a4ef-0000092a8423","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5a7bce-04e1-1bfa-1227-00002832e67f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47dd59-56d7-dccf-77e0-00004b353f5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f28f311-9ba1-1cc3-fc3e-0000e3b69652","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e0178f-f176-062f-5761-0000bb967fe5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ced049-30f3-76ac-d5e9-000076d9d96b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01568980-9603-7859-5675-00007d0a89ec","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0236ca9-f054-2a3c-f10d-000049f07658","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4398af10-277c-2be0-50b2-00003f1b5dcd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b748df-27df-7fb4-3386-00001f06d487","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08c0192-ac3b-3e67-a8b3-0000f7f4d7da","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c3db1d-8b19-089e-179d-00008029fa30","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbbba91-a048-4b55-d8ff-00004a3ebb14","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9280769e-9803-2ef6-2f56-000097268d96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef961f9-505e-25ef-49e1-0000f6e41db1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1750929d-8fb2-4fbd-f308-000029a1d776","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6b5e92-283a-db57-2a4e-0000f4b9e1f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c47e9-9015-ffe2-662f-0000a9795a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.208.202.85:9914/i","pattern":"[url:value = 'http://103.208.202.85:9914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f4b818f-4d5b-fbfc-3d4f-0000dd89287e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://39.105.200.188/02.08.2022.exe","pattern":"[url:value = 'http://39.105.200.188/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c70381-4665-a7bc-9506-00003aac303e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15bc65cf-3c7e-53cb-60f8-0000b4d8f483","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc43167-522c-d0c1-10c5-0000e3ba991c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f626dd-a8cb-1ab7-8e14-0000e62737b5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30dab3f-5dc5-6dd1-2f6a-0000e803fe3f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.lnk","pattern":"[url:value = 'http://68.110.47.231/av.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ef6741-7ea5-d7ba-e4f2-00009f27a030","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0206c5-2b54-9b9f-b580-0000db46d704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3ea491-d976-ccde-848c-000003adf3e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.lnk","pattern":"[url:value = 'http://68.110.47.231/photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8035841-5578-29ca-9490-00006e452407","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.lnk","pattern":"[url:value = 'http://68.110.47.231/video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f820f8-12ef-63f0-ce7c-000069433963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4583570-3022-1d99-5f88-00006706364a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96fb2f47-babb-d564-e7f8-0000b9d0cd84","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebc6a81-1a53-6220-1781-0000494448ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.scr","pattern":"[url:value = 'http://68.110.47.231/video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b299ff-653f-4287-e8e8-0000cf0292d5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.scr","pattern":"[url:value = 'http://68.110.47.231/av.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b819651-608e-328e-ec15-000024ac9f08","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.scr","pattern":"[url:value = 'http://68.110.47.231/photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b6eacb-99b3-14fa-862a-0000ef1f31c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/info.zip","pattern":"[url:value = 'http://68.110.47.231/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2526ca12-65fe-98b7-d227-000008cc88ac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.154.90.21:4747/i","pattern":"[url:value = 'http://103.154.90.21:4747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf137d-1622-04ed-d353-0000c26b20d6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.190.74.159/sshd","pattern":"[url:value = 'http://88.190.74.159/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4144fab-770c-c0c3-5241-00004c60707c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.66.224.73:8080/sshd","pattern":"[url:value = 'http://82.66.224.73:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69780bcd-b372-0c5b-ba0a-0000d02b6011","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/i","pattern":"[url:value = 'http://138.219.58.34:28990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54527f32-79e8-c47b-1703-0000fe5b21e5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.219.38.228:23053/i","pattern":"[url:value = 'http://178.219.38.228:23053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31ea338-8995-ce3b-c81f-0000a12b236c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://86.89.95.77:8999/sshd","pattern":"[url:value = 'http://86.89.95.77:8999/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2504f598-b174-52fe-bb12-000069d07d22","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d14ff0-5fdd-ebe9-b46f-0000c7878705","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://93.39.215.44:9111/sshd","pattern":"[url:value = 'http://93.39.215.44:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceba9d76-3f72-c20d-46ba-00004b51ff47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://129.0.120.134:9999/i","pattern":"[url:value = 'http://129.0.120.134:9999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb95120f-bc29-74d5-1a3b-000007bb1540","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.189.6.236/curl","pattern":"[url:value = 'http://107.189.6.236/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4bc18b-054d-0600-b7f4-00002af9cf74","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://2.55.81.169:802/sshd","pattern":"[url:value = 'http://2.55.81.169:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfe021c-03a1-a75b-8130-00008979a27f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://85.187.54.142:10032/sshd","pattern":"[url:value = 'http://85.187.54.142:10032/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f5b049-867e-98ee-9b5c-0000a22f5bbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/i","pattern":"[url:value = 'http://41.162.188.251:22850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07812323-2ead-5f7c-a0f9-0000ea6b79c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://66.39.79.68/","pattern":"[url:value = 'http://66.39.79.68/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9d6525-5b84-d008-56f9-00005cc4b141","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://3.141.75.29/","pattern":"[url:value = 'https://3.141.75.29/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcbb965-f910-6e08-1e69-000083db42b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://13.113.8.105/","pattern":"[url:value = 'https://13.113.8.105/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24215dc5-fe78-0112-2b8b-0000206e2266","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://18.217.254.255/","pattern":"[url:value = 'https://18.217.254.255/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b6dc1c-b47d-b328-255d-0000eec58332","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.134.8.43:93/sshd","pattern":"[url:value = 'http://188.134.8.43:93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25368e03-30ce-9acb-7e48-00009c8adb8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.42.177.12:3389/i","pattern":"[url:value = 'http://94.42.177.12:3389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b744ff-44b3-5973-498a-00008bfeddad","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://scrroeder.com/1q1q.js","pattern":"[url:value = 'https://scrroeder.com/1q1q.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d6166-c565-8755-c415-0000f7c9b5f9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.255.210.242:45640/i","pattern":"[url:value = 'http://37.255.210.242:45640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2dbb3b-d1ce-6481-6e16-00009ea664f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.127.68.162:55090/","pattern":"[url:value = 'http://115.127.68.162:55090/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7ef27d-2749-c541-81d1-0000396861f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.160.116.52:57196/","pattern":"[url:value = 'http://182.160.116.52:57196/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d7dd86-8fee-193f-2c82-00003defde8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN32.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN32.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3023826f-7f76-8f61-b0b7-00001c2f4238","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11684f3-3b79-0c92-819a-0000e8cf60e8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namuxp.zip","pattern":"[url:value = 'https://www.namuvpn.com/install/namuxp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61bd262-48ab-4353-ce5b-0000864e3467","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://46.151.56.42:28186/","pattern":"[url:value = 'http://46.151.56.42:28186/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94937ca-e591-0df0-664a-0000f7490fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namu864.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/namu864.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7a75cd-9b80-41bd-65ba-00008f995523","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.240.70.185:14868/","pattern":"[url:value = 'http://115.240.70.185:14868/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cdb7dc-c67b-4606-3d2a-00003eb40f2a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://122.170.110.131:9105/cryptography_module/base_library.zip","pattern":"[url:value = 'http://122.170.110.131:9105/cryptography_module/base_library.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a16802-0f44-b764-5b3b-0000fb07e392","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.12.78.161:36220/","pattern":"[url:value = 'http://185.12.78.161:36220/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01cecb3c-c353-58ca-40c0-00008dd5b869","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.244.113.217:53408/","pattern":"[url:value = 'http://94.244.113.217:53408/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582bfe06-2a21-c492-b296-0000d6780c37","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.220.234.5:53133/","pattern":"[url:value = 'http://178.220.234.5:53133/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba24c3fa-5c0e-1522-d59a-000090f1d34e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://81.16.249.96:46703/","pattern":"[url:value = 'http://81.16.249.96:46703/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e68681-e837-1759-086d-000030314c69","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.20.138:24291/","pattern":"[url:value = 'http://202.148.20.138:24291/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0008fcce-1094-dc74-a874-0000d995d867","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.252.69.10:58829/","pattern":"[url:value = 'http://37.252.69.10:58829/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d234c40-fd88-8867-8a55-00007a47b918","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/","pattern":"[url:value = 'http://87.119.108.21:40462/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb044475-aa29-6af8-07ac-00003534a1f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://190.12.99.194:28516/","pattern":"[url:value = 'http://190.12.99.194:28516/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a343dc-d194-9624-01b4-0000e46e671f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/","pattern":"[url:value = 'http://138.219.58.34:28990/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ce8ae5c-b0c7-e220-6d0b-00000f85691b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.75.193.34:9432/","pattern":"[url:value = 'http://217.75.193.34:9432/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ed4678-ca27-3953-ea6d-0000d60c0a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://212.107.232.167:21838/","pattern":"[url:value = 'http://212.107.232.167:21838/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1dfd23-0e7e-1125-bed1-00000c694e21","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.155.92.203:3956/","pattern":"[url:value = 'http://216.155.92.203:3956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0de4e6-6c80-868d-35ad-00001dbaa387","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://83.218.189.21:5195/","pattern":"[url:value = 'http://83.218.189.21:5195/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e47c66c-e8f7-94a8-74e9-0000c0a3d35f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.164.117.74:42924/","pattern":"[url:value = 'http://103.164.117.74:42924/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8418c75e-7f9e-f0f9-d27a-000005839f4f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.134:10702/","pattern":"[url:value = 'http://154.0.129.134:10702/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbeaeb04-8188-0670-5338-00000e2acce8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.140.32.219:12617/","pattern":"[url:value = 'http://78.140.32.219:12617/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57278d8c-11c6-3aed-0d0f-0000377ef470","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.178.100.190:4788/","pattern":"[url:value = 'http://115.178.100.190:4788/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7f01e7-9d22-0029-6d6b-0000817adeeb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.131.234.26:51118/","pattern":"[url:value = 'http://202.131.234.26:51118/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3136cb6a-1f7d-b988-799c-000056829075","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.114.200.50:48416/","pattern":"[url:value = 'http://82.114.200.50:48416/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85768dff-55bc-1152-63a2-00007da543c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://186.138.107.5:14491/","pattern":"[url:value = 'http://186.138.107.5:14491/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af68559-e770-b8ab-9649-000085316bfc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.84.212.18:20781/","pattern":"[url:value = 'http://154.84.212.18:20781/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709c94e2-deff-a2b8-6330-0000b284d161","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.114:10702/02.08.2022.exe","pattern":"[url:value = 'http://154.0.129.114:10702/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b0f07c1-c2df-a85d-db32-0000bbe532c4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://62.197.62.195:60001/sshd","pattern":"[url:value = 'http://62.197.62.195:60001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43055a89-86b7-090f-a230-00002aac24b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.95.137.155:1876/i","pattern":"[url:value = 'http://36.95.137.155:1876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d63bcf-61ca-b758-99f7-00003d870cf3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/.i","pattern":"[url:value = 'http://45.147.202.53:9635/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64350af1-93f4-fee6-f739-0000ec2c7084","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://102.23.89.5:8083/sshd","pattern":"[url:value = 'http://102.23.89.5:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee6607e-0fd5-c0e8-4780-0000868d2cb0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/bin.sh","pattern":"[url:value = 'http://95.155.243.196:38537/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b874ce90-fb7d-da62-527c-00000b74b203","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/i","pattern":"[url:value = 'http://95.155.243.196:38537/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883604e0-66d9-15d4-5cda-0000f642c51b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/i","pattern":"[url:value = 'http://45.147.202.53:9635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df7cce0f-7591-55fa-a564-0000f3e0c59b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/i","pattern":"[url:value = 'http://213.5.194.56:43416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e93035d0-8232-380c-06d2-0000fd17826d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.62.202.150:10052/sshd","pattern":"[url:value = 'http://95.62.202.150:10052/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5d6720-f6f1-5258-6676-0000f35dd3dd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.40.178.238:53237/i","pattern":"[url:value = 'http://202.40.178.238:53237/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac6865-7877-4392-ab16-0000c82e4275","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://184.185.30.182:29029/.i","pattern":"[url:value = 'http://184.185.30.182:29029/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4c197f-5129-e1fd-64b7-00004fb1ce8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.88.6.203:8907/.i","pattern":"[url:value = 'http://36.88.6.203:8907/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5622e337-c510-44e0-0d81-000075615726","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/.i","pattern":"[url:value = 'http://41.162.188.251:22850/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9348eec-17a7-ab12-c3ce-0000d03a2dd3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/.i","pattern":"[url:value = 'http://213.5.194.56:43416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58307433-5186-83ad-eee6-0000bfd19261","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://196.39.143.113:8080/sshd","pattern":"[url:value = 'http://196.39.143.113:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce71d395-9265-9547-39d1-000082b9e80d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/.i","pattern":"[url:value = 'http://50.43.160.231:38064/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0abde195-7fb7-61e6-d6af-0000fd1b3223","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.135.26.83:32710/.i","pattern":"[url:value = 'http://88.135.26.83:32710/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce829b5-87c9-74d7-2041-0000dd748c48","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/.i","pattern":"[url:value = 'http://138.219.58.34:28990/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16807076-a7e6-1dfd-63fb-0000668dab8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/.i","pattern":"[url:value = 'http://45.173.12.30:17886/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151bc9aa-8f86-09f2-0a13-0000b0c438e6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://24.37.71.230:54401/.i","pattern":"[url:value = 'http://24.37.71.230:54401/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf9179fe-fbbc-8212-423c-000032d97aa6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://77.50.222.238:51680/.i","pattern":"[url:value = 'http://77.50.222.238:51680/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb09d5c-4770-67bb-88f2-00009e5ed59f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.88.234.44:64615/.i","pattern":"[url:value = 'http://202.88.234.44:64615/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b416d8-64ea-fdd9-bbec-0000a778e31c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv5l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a82745a-b742-9992-7f8d-0000ddb8b07c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv7l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd7aa72-8e8e-63e1-6dc4-0000ef5cea5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/x86","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5399451b-147a-978b-e0d4-0000e0d899cc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv6l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09400318-db6c-5645-b27e-0000bbb2a53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/mips","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61af2799-edec-4ab7-0cb3-00009a18caac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv4l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781a6a6a-1814-b930-8c89-0000d3467177","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://181.171.188.254:17418/.i","pattern":"[url:value = 'http://181.171.188.254:17418/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1a38db2-849e-391f-972a-0000f35e7b75","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/.i","pattern":"[url:value = 'http://87.119.108.21:40462/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7589f785-7c9a-8215-3437-0000dc11d04e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://52.248.41.253:8443/02.08.2022.exe","pattern":"[url:value = 'https://52.248.41.253:8443/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e986518d-9fde-6cf6-9eb8-0000bae08794","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/busybox-armv7l","pattern":"[url:value = 'http://156.246.93.156/busybox-armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cd78af-d256-ea95-2d1d-000024611224","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.8.20.75:10002/sshd","pattern":"[url:value = 'http://88.8.20.75:10002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6d97a3-7ab0-31b6-3c93-0000224ba7a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/i","pattern":"[url:value = 'http://45.173.12.30:17886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e554c16-aec6-fac5-b0c0-0000ab103f20","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.18.221:30944/i","pattern":"[url:value = 'http://202.148.18.221:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89159d06-7718-2677-f709-000059c92929","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.89.189.98:46828/i","pattern":"[url:value = 'http://80.89.189.98:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6a8a8-9fe2-9830-a54f-000037c41849","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.67.246.82:22072/i","pattern":"[url:value = 'http://36.67.246.82:22072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40918c38-1257-ec66-20de-0000ce308553","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.6.196.230:27629/.i","pattern":"[url:value = 'http://213.6.196.230:27629/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348700a8-2c0f-929d-1e58-000050c15fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.93.200.20:2260/.i","pattern":"[url:value = 'http://103.93.200.20:2260/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb90a907-cb96-ebcf-6f57-00007ef3c734","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/.i","pattern":"[url:value = 'http://103.90.206.87:4419/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff581a65-4172-abd2-dcfd-00006ff76f87","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.54.221.234:55031/.i","pattern":"[url:value = 'http://200.54.221.234:55031/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61adc761-7de2-8b00-0ff1-000091bf7a04","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.118.103.42:26816/.i","pattern":"[url:value = 'http://200.118.103.42:26816/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c29c7f8a-04d5-ab8d-ab5e-000049ca616c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/.i","pattern":"[url:value = 'http://36.64.227.134:63289/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a337c623-8e09-8580-328f-0000eb606873","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/i","pattern":"[url:value = 'http://103.90.206.87:4419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad357b-e8d0-650f-5c45-0000a684dfc6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8083/sshd","pattern":"[url:value = 'http://144.6.89.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a805c3-5ab7-3c32-529a-0000c2e5b20f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8084/sshd","pattern":"[url:value = 'http://144.6.89.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c2c9b-e92c-b10a-37ba-0000136e05ca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://31.55.236.199:8080/","pattern":"[url:value = 'http://31.55.236.199:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0bf3dd-851a-48f7-a23c-0000d9648847","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://141.134.214.46/","pattern":"[url:value = 'http://141.134.214.46/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67cfe3f-a231-3640-c49d-000008cd1681","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.86.50.18:88/","pattern":"[url:value = 'http://116.86.50.18:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0691ff42-b8e2-f474-2330-0000934442a6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.3.138:88/","pattern":"[url:value = 'http://80.147.3.138:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348b28e-e21e-e9e6-df22-0000b129769f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.246.34.66:8088/","pattern":"[url:value = 'http://220.246.34.66:8088/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec1914-aa3d-16bc-f6f2-0000dde549cb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://174.71.238.196:81/","pattern":"[url:value = 'http://174.71.238.196:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36c5e96-276b-3807-3c33-00006dd4dc86","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.167.179.75:88/","pattern":"[url:value = 'http://188.167.179.75:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783148f-e715-e22b-3575-000044001c0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.93.58.234:82/","pattern":"[url:value = 'http://182.93.58.234:82/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef919d2-c55c-4bc2-fc6c-0000251a474e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.165.183.55:83/","pattern":"[url:value = 'http://213.165.183.55:83/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d359599c-1be4-3d99-a04d-000079b10ba4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://108.41.80.142:84/","pattern":"[url:value = 'http://108.41.80.142:84/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db84825-891a-159b-1ad5-000037ea3f0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.44.199.50/","pattern":"[url:value = 'http://78.44.199.50/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d0cc06-4693-7922-0e86-0000116773bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.167.133.17/","pattern":"[url:value = 'http://109.167.133.17/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8650eb-e3d5-9e15-11d3-0000efa10102","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.175.181.210:81/","pattern":"[url:value = 'http://202.175.181.210:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9474e5d-bbd7-6bbe-dda2-000016504e4c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://121.101.79.178:88/","pattern":"[url:value = 'http://121.101.79.178:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48303aad-2213-52ef-22fb-000026a66500","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://92.43.24.71/","pattern":"[url:value = 'http://92.43.24.71/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc34396e-24e8-f8c2-9cec-0000990fda47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://193.165.245.46:8000/","pattern":"[url:value = 'http://193.165.245.46:8000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58130e20-3870-f9cf-440f-0000d6066f46","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://218.103.122.102:50956/","pattern":"[url:value = 'http://218.103.122.102:50956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b03a58-86aa-1b0e-e402-000078115704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://124.36.156.140:8080/","pattern":"[url:value = 'http://124.36.156.140:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cff67c-f024-97d6-e25d-0000e0a04d54","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.180.227.121:81/","pattern":"[url:value = 'http://90.180.227.121:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850afd1c-d721-f8b1-e176-0000a08d69d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://159.196.16.186:88/","pattern":"[url:value = 'http://159.196.16.186:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9db4f60-90af-3d20-eb85-0000da41d6d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.138.104.129:4000/","pattern":"[url:value = 'http://87.138.104.129:4000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d33667-1e71-b567-63ed-00002f288a18","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.60.107.150:8080/","pattern":"[url:value = 'http://185.60.107.150:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea1ef1d2-2b91-2065-1c24-00008dd34985","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.118.128.34:30117/i","pattern":"[url:value = 'http://185.118.128.34:30117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287dceca-b8bf-7984-dd24-00001383a151","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://47.152.112.236:8105/sshd","pattern":"[url:value = 'http://47.152.112.236:8105/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dd7df02-d88e-f660-d1ef-0000e9e50f0a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.86.246.233:38185/sshd","pattern":"[url:value = 'http://88.86.246.233:38185/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb72f670-9b47-491c-1752-00005c6a7b2e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/pg.sh","pattern":"[url:value = 'http://78.153.140.16/pg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445a2d1f-e100-fd7b-2d69-0000489843a2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.122.211.138:31644/02.08.2022.exe","pattern":"[url:value = 'http://200.122.211.138:31644/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e7aac-4572-6053-64cb-0000167c5d00","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/for","pattern":"[url:value = 'http://78.153.140.16/for']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a75098b-55ca-00ab-56cc-0000e8bb8faf","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/busybox","pattern":"[url:value = 'http://78.153.140.16/busybox']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4970a14-7da2-03eb-8d72-00007bdda0bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/bin.sh","pattern":"[url:value = 'http://96.66.24.241:39432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a042a2-7b20-7c7b-ef4a-00003a134256","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/i","pattern":"[url:value = 'http://96.66.24.241:39432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b52d4b-d46b-8beb-9ea1-000013983af3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.87.112.128:47907/i","pattern":"[url:value = 'http://213.87.112.128:47907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7f537d-16c5-6b42-cf8e-0000f973dc3d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/i","pattern":"[url:value = 'http://217.208.164.149:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ae5d32-c6b7-252a-2905-0000ede2d987","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/mt.sh","pattern":"[url:value = 'http://78.153.140.16/mt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348d6c93-4a70-506b-e0ae-000051629805","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/curl-amd64","pattern":"[url:value = 'http://78.153.140.16/curl-amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b01bf7-7520-62fe-8fd3-000026aa58de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/sc.sh","pattern":"[url:value = 'http://78.153.140.16/sc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c378fa78-add6-2f99-6813-00001e198cbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/xx.sh","pattern":"[url:value = 'http://78.153.140.16/xx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a311e626-ff6c-97b0-b8ba-0000aa220bc7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/ph.sh","pattern":"[url:value = 'http://78.153.140.16/ph.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2783abe3-ab9e-d567-1b44-000066909cc8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.224.208.161:48263/bin.sh","pattern":"[url:value = 'http://90.224.208.161:48263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4529c55b-bb37-4f63-3c93-000060a03fdd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/bin.sh","pattern":"[url:value = 'http://217.208.164.149:45464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d99a05e-9c1f-4caf-f587-0000b580d130","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/3.exe","pattern":"[url:value = 'http://178.16.54.109/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a9a1bc-33fe-c9fb-29f9-00002024d4b8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/armv5l","pattern":"[url:value = 'http://195.178.110.204/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9721d6b-47e7-601d-fdef-0000f1931dca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips","pattern":"[url:value = 'http://195.178.110.204/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6247cd-729f-666d-0590-000071859977","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i486","pattern":"[url:value = 'http://195.178.110.204/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f858d7a9-cb63-ba92-7490-00008916a9a7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mipsel","pattern":"[url:value = 'http://195.178.110.204/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfcb720b-8aec-5540-39e5-0000e99caabc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sh4","pattern":"[url:value = 'http://195.178.110.204/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a4edc52-068d-80f5-8634-000027a759de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sparc","pattern":"[url:value = 'http://195.178.110.204/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4157be1c-b0cb-a880-c894-00006e03589a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/powerpc","pattern":"[url:value = 'http://195.178.110.204/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e29bd-8c74-66af-6ebd-0000f165cb10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/m68k","pattern":"[url:value = 'http://195.178.110.204/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da02dfa-ede4-65b3-4607-0000bad94ad2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i586","pattern":"[url:value = 'http://195.178.110.204/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7e00f8-bad6-425a-c299-0000f81c3bf1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips64","pattern":"[url:value = 'http://195.178.110.204/mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978ef74c-2d17-cdf0-fee3-0000dc0be8c0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/y","pattern":"[url:value = 'http://195.178.110.204/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775b1e52-3557-e352-f2f6-0000b3b608a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/s","pattern":"[url:value = 'http://195.178.110.204/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e38bb67-d52b-4b09-8ed1-000096dd5778","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/u","pattern":"[url:value = 'http://195.178.110.204/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdae133-c097-2f9f-298e-0000f338e72b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://160.119.69.4/x","pattern":"[url:value = 'http://160.119.69.4/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af8a1c7-9e64-d779-632e-000064ec3287","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/k.php","pattern":"[url:value = 'http://45.95.147.178/k.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4d566d-578f-94a9-faf5-000050f5dafc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/x","pattern":"[url:value = 'http://45.95.147.178/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e953f3-396c-f1cf-7767-00000bb4dcfe","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.107.139.197/WSW0","pattern":"[url:value = 'http://216.107.139.197/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abb0fff-a923-e629-84d3-000091c50702","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.155.8.56/WSW0","pattern":"[url:value = 'http://202.155.8.56/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7cbcb4-372d-2f5d-a95f-000027e2cf2b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm7","pattern":"[url:value = 'http://45.66.228.93/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1dc5ee-d080-4cb9-b223-00008281f7c8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_mips64","pattern":"[url:value = 'http://45.66.228.93/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264b2150-7fd6-470c-55a9-0000f55be6c3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm64","pattern":"[url:value = 'http://45.66.228.93/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f764bff4-6267-4f03-b0b2-00006f398963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://65.99.181.12:49304/bin.sh","pattern":"[url:value = 'http://65.99.181.12:49304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dfe611-ac01-3c6c-fd58-0000f7da1721","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.88.191.25:4472/i","pattern":"[url:value = 'http://88.88.191.25:4472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc16a5d-6d3f-985c-161a-0000e3638969","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.83.87.122/run.sh","pattern":"[url:value = 'http://103.83.87.122/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa660add-8b7f-f0d6-6c80-00002f19cfd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/white_notepad_rcdata.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/white_notepad_rcdata.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d080ec-218f-7a1a-5af6-0000e9de2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/34534.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/34534.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef3efe0-3e1d-bc5b-464e-0000a0c6d9a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/test.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/test.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--057c786f-7c43-1952-904b-000009a8075f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/EC_puller.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/EC_puller.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d46da1-3617-712e-4909-00007d2171fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.36/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b926d0-7e94-cbaf-f8b7-0000089cf873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b44ebb-ad8e-013c-2bee-00009f8b4145","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c62796-f41b-ee98-b245-0000a52a546f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.245/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4e10ef-1c38-4839-61d4-00008d6eacc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/yl2g3svth10bgzd/file","pattern":"[url:value = 'https://www.mediafire.com/file/yl2g3svth10bgzd/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc02676d-6e61-e21e-f2c1-000070cb812d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.196.221/main_arm7","pattern":"[url:value = 'http://87.120.196.221/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7801392-9112-9007-f104-000086b6eb25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update","pattern":"[url:value = 'https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943ab489-0b99-3797-810a-00005c37d73b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi","pattern":"[url:value = 'https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702b61ca-06dc-95bc-b756-0000b814f5ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi","pattern":"[url:value = 'http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be91e69-cb2c-3071-5c75-0000bee7d089","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.128/bins/c.sh","pattern":"[url:value = 'http://31.77.227.128/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f62a06-5379-d3c5-ed5b-0000cb4ea22e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/dodu","pattern":"[url:value = 'http://213.177.179.11/dodu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03630d9-e55f-2e6c-7f87-000066d2e89b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.5.60:34419/i","pattern":"[url:value = 'http://110.37.5.60:34419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91549e80-f1d5-5298-a5b1-000096876cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/i","pattern":"[url:value = 'http://125.43.35.24:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329a8b59-e05a-5db2-f92a-00005fb66b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/bin.sh","pattern":"[url:value = 'http://95.155.201.65:38304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54ed1e-023c-4ca2-b7c3-00006518d395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/bin.sh","pattern":"[url:value = 'http://95.56.232.109:37061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4ca38-ae00-e5c9-50e9-00003ea0a9e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://81.227.43.110:42887/bin.sh","pattern":"[url:value = 'http://81.227.43.110:42887/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ded292-09c3-2560-6be4-0000d884711e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.12.46:51362/i","pattern":"[url:value = 'http://182.119.12.46:51362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880a31bf-c4c0-7717-e2b4-00001cfc12a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.88.136.194:55285/i","pattern":"[url:value = 'http://36.88.136.194:55285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288cb3f6-72cc-b96f-6ede-00006ed97894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/i","pattern":"[url:value = 'http://110.39.231.36:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc1c637-d25f-8d6b-79c3-0000a49134be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:38213/bin.sh","pattern":"[url:value = 'http://110.36.1.200:38213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3fcfc4-9025-73de-04bd-000098d49d75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/bin.sh","pattern":"[url:value = 'http://223.108.82.26:47552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41328f86-96c6-89db-4316-00006502f7d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://204.244.176.203:60318/i","pattern":"[url:value = 'http://204.244.176.203:60318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d373e04c-7279-585a-032a-00001a84e2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.236.63:53748/i","pattern":"[url:value = 'http://27.207.236.63:53748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf4f226-fc23-e5fe-0f8d-000054ecca2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/i","pattern":"[url:value = 'http://223.108.82.26:47552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78e8006-9eb4-3a9d-0a78-0000c1780f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.89.147:43414/i","pattern":"[url:value = 'http://115.50.89.147:43414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b8a97cf-768b-22e7-ab6d-00005de8e20b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/i","pattern":"[url:value = 'http://95.56.232.109:37061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5a36d7-1444-5692-fa83-00007e124f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.222.47.36:58453/bin.sh","pattern":"[url:value = 'http://27.222.47.36:58453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f995119-147f-4f1e-f9e8-0000cdf29a9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://68.65.100.46:46734/bin.sh","pattern":"[url:value = 'http://68.65.100.46:46734/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd168a7-7d3e-89f4-adb8-000074b10dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/i","pattern":"[url:value = 'http://42.177.186.117:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b210d28b-6e71-4808-6852-0000b7af0684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/i","pattern":"[url:value = 'http://125.44.212.22:49662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb2f98e-efb7-3bdb-b063-0000ffccfb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/bin.sh","pattern":"[url:value = 'http://123.170.100.105:42942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b5c09e7-5800-a4c6-cf4b-0000ebc42566","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/i","pattern":"[url:value = 'http://59.58.42.82:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70a4e78-a9d8-35d3-25a5-000020bbf764","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/i","pattern":"[url:value = 'http://112.109.219.147:35136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6704ad23-7c20-c7b0-9e1c-0000d2b9bbcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/i","pattern":"[url:value = 'http://182.116.9.201:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2c0784-6c2e-2976-18a5-00006fd30c8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.37:32825/i","pattern":"[url:value = 'http://42.230.157.37:32825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0daf83d9-4bed-b086-9466-000020e93eed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/i","pattern":"[url:value = 'http://222.139.198.215:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473b733a-7c5a-5751-730b-00006893e6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/bin.sh","pattern":"[url:value = 'http://42.232.226.240:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c8f72c-0e89-6913-2834-00000b63c7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/i","pattern":"[url:value = 'http://42.228.252.188:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0fd93bc-7082-91e8-4e8c-0000a1521542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.182.221:40037/i","pattern":"[url:value = 'http://123.14.182.221:40037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874095b0-6c7c-5cad-02ee-00004bc284f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/bin.sh","pattern":"[url:value = 'http://78.26.18.38:48086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2902ca3c-3abc-27ae-74e4-0000061c079b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/i","pattern":"[url:value = 'http://42.55.138.49:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4ab16e-3979-15d9-6343-0000dde894b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/i","pattern":"[url:value = 'http://39.90.145.143:54042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6bc2f-f619-92a5-9c1b-0000e0a7d2db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/i","pattern":"[url:value = 'http://27.207.139.137:59758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56a0326-2a18-43e9-ccbc-00004efca4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:35406/bin.sh","pattern":"[url:value = 'http://119.179.214.25:35406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc169a74-74ab-92ea-7518-0000d8f4521f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.152.37:45005/i","pattern":"[url:value = 'http://115.58.152.37:45005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f969f88-0735-9b34-d75c-0000f4e5af7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/bin.sh","pattern":"[url:value = 'http://27.215.126.192:55352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af811b5-4544-a52b-627f-0000d75c2061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/i","pattern":"[url:value = 'http://115.58.130.246:33076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8243fbd7-2e93-0333-5e02-0000642d4ec5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/bin.sh","pattern":"[url:value = 'http://182.116.9.201:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbffa45-dca1-2b8b-df11-000037aaad53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/i","pattern":"[url:value = 'http://113.228.149.193:49576/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58ec7c2-1c8f-c24e-6a8c-0000e8e6e8db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/bin.sh","pattern":"[url:value = 'http://182.126.81.119:38169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc54e5d3-39ea-f527-f84d-000034b65c5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.239.253:57738/bin.sh","pattern":"[url:value = 'http://110.39.239.253:57738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586343cb-01c3-01af-2e61-000066631073","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.130.126:36331/i","pattern":"[url:value = 'http://119.183.130.126:36331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b674a0b8-21f7-1c03-b8f7-0000c654e37c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.95.98.66:8012/linux","pattern":"[url:value = 'http://210.95.98.66:8012/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b197a64-41b8-6380-fbc6-00000a131f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/i","pattern":"[url:value = 'http://110.37.84.212:34554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac752a07-88d5-5171-f9ad-0000be3d1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/bin.sh","pattern":"[url:value = 'http://42.55.138.49:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e23c-a321-4fd4-a07d-0000e7272af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.92.171:60432/bin.sh","pattern":"[url:value = 'http://42.231.92.171:60432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086299e2-81c9-3260-f202-00005d2f704f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/i","pattern":"[url:value = 'http://78.26.18.38:48086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5732a0-14e5-7ee3-2971-000035718803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/bin.sh","pattern":"[url:value = 'http://110.39.231.36:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f7c57b-d369-a2dc-379c-00003986860c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/i","pattern":"[url:value = 'http://182.121.144.189:60356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b55b145-346a-4c64-ae2a-000064f8303c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/i","pattern":"[url:value = 'http://182.126.81.119:38169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cb8976-3da7-c8eb-2de1-000042fd6971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.252.36:36560/bin.sh","pattern":"[url:value = 'http://42.239.252.36:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1628a5bc-3351-d22d-7aae-0000def7a29a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/bin.sh","pattern":"[url:value = 'http://125.44.212.22:49662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9860d4-951e-8c77-caab-0000e5dfa8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.154.251:35768/bin.sh","pattern":"[url:value = 'http://124.131.154.251:35768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8675a7-c1c2-232f-503e-00007ed2a5c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/i","pattern":"[url:value = 'http://125.41.8.245:37624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e28ec61-7de3-84c9-49fd-00007a1df0fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/bin.sh","pattern":"[url:value = 'http://27.215.212.219:39234/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca99e15-90ea-e4ff-e643-0000ae539841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/bin.sh","pattern":"[url:value = 'http://108.168.0.60:36003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9645ab99-d7a9-d31a-c14f-00004df1167a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:35077/bin.sh","pattern":"[url:value = 'http://210.208.110.20:35077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3331af8c-681d-5b4d-e889-000064180765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:41323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a155a8a-2825-bd1a-be18-0000355d8a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/bin.sh","pattern":"[url:value = 'http://222.139.198.215:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72c471b-0376-7c5f-c140-000069e5bcf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/bin.sh","pattern":"[url:value = 'http://115.58.130.246:33076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee11c422-3e3b-e7a3-0fb6-00000a99e576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.169.3:39736/bin.sh","pattern":"[url:value = 'http://42.87.169.3:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0236e05-b0fc-fb2c-640b-0000aba4b0ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:51370/bin.sh","pattern":"[url:value = 'http://221.1.226.175:51370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d63e6f04-5cba-0cfb-2a5b-0000d07b8767","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.90.244:47446/i","pattern":"[url:value = 'http://221.15.90.244:47446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d741f2-d727-5047-d7fc-0000b3e3dbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/i","pattern":"[url:value = 'http://89.189.181.54:34451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5307589-5e16-23f1-e74e-00006e03d81b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/bin.sh","pattern":"[url:value = 'http://175.175.215.229:57947/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa06f17-ca8e-680f-79ee-0000d9ac24e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.209.101.105:37817/i","pattern":"[url:value = 'http://221.209.101.105:37817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a0e3f6-e378-cd51-0cf8-0000e6ba49ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.51.204.238:50663/bin.sh","pattern":"[url:value = 'http://58.51.204.238:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2351ca65-f93b-2df6-a092-0000971312e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/i","pattern":"[url:value = 'http://115.61.120.117:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a228ea9a-d135-f49d-b5d1-000095d6cbb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.31.157:39851/bin.sh","pattern":"[url:value = 'http://42.224.31.157:39851/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b653a00e-5d9f-97a5-90e5-0000a28dd4b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/i","pattern":"[url:value = 'http://182.113.205.38:37725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dc7e17-50bb-0140-3f4a-0000d3c63abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/bin.sh","pattern":"[url:value = 'http://110.36.80.162:46146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d1c874-cb62-94fb-0942-000055793a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/bin.sh","pattern":"[url:value = 'http://182.121.141.220:34479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--122ee7c0-b3b6-a497-226a-0000a830bb18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.108.27.91:45906/bin.sh","pattern":"[url:value = 'http://91.108.27.91:45906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c71d815e-9c2a-6e60-031c-0000d3ca8300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/i","pattern":"[url:value = 'http://42.225.228.107:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e5a8ee-4c9a-49db-0092-0000e1b498ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.174.185:43822/bin.sh","pattern":"[url:value = 'http://219.154.174.185:43822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3842b541-b323-0aa0-ace7-0000844ed820","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.203.254:46174/bin.sh","pattern":"[url:value = 'http://123.190.203.254:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c263d5e1-5da1-cac6-0ab7-000074a2fe43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.54.177.157:60692/bin.sh","pattern":"[url:value = 'http://42.54.177.157:60692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd4fd15-d7ec-bc45-9bfc-0000ce37ad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/i","pattern":"[url:value = 'http://42.180.11.230:34276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7ef819-e5dd-89fb-ae21-00008c59eac1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/i","pattern":"[url:value = 'http://95.155.201.65:38304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03f6fa22-6309-bdda-497f-00007532893d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/i","pattern":"[url:value = 'http://27.215.212.219:39234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d415eb39-faab-a659-75eb-00000f9b55a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/bin.sh","pattern":"[url:value = 'http://42.225.228.107:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc12c11-15ad-afdb-7b69-00003cc015cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.107.63.26:8127/linux","pattern":"[url:value = 'http://47.107.63.26:8127/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea798a1-c14d-5af5-7f8c-0000dde6440e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/i","pattern":"[url:value = 'http://27.215.126.192:55352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432cc46e-f98a-901d-373a-00002b71dd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.49.47:47425/i","pattern":"[url:value = 'http://219.157.49.47:47425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426708ec-c956-7a33-9c21-00004f8112db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/i","pattern":"[url:value = 'http://182.121.141.220:34479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb08f0d-6675-5512-94e9-00008bd4e12a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/i","pattern":"[url:value = 'http://175.0.62.242:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032703bc-3a35-5e51-d526-0000b615a471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/i","pattern":"[url:value = 'http://42.232.226.240:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58217655-b844-c5b4-9ea2-0000ab0d6783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/i","pattern":"[url:value = 'http://110.36.80.162:46146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd309c4-50a1-1e9d-98f3-0000acc84389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/i","pattern":"[url:value = 'http://175.175.215.229:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3526726d-260e-f189-4f06-00007b7d8361","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/bin.sh","pattern":"[url:value = 'http://110.37.84.212:34554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18c27f7b-7fb7-bb98-0706-0000711f04a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/bin.sh","pattern":"[url:value = 'http://175.0.62.242:40182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27f6de5-4143-e081-418d-00004bb62e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/Mozi.a","pattern":"[url:value = 'http://183.23.139.207:35951/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801acb44-b965-4e13-0875-0000568997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/bin.sh","pattern":"[url:value = 'http://115.57.199.157:51293/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8bde2f-fb77-e7c8-28c0-0000a2b6f6c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.245:54758/i","pattern":"[url:value = 'http://115.48.148.245:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9573221e-8b53-841b-c8ea-00008c70ade7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/i","pattern":"[url:value = 'http://42.179.152.19:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f02b749-4f0c-2999-5b99-0000ceb7aaed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/bin.sh","pattern":"[url:value = 'http://124.131.53.180:42721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7c9aa8-09d2-62e1-4020-0000f100167f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.85.180.51:37572/bin.sh","pattern":"[url:value = 'http://42.85.180.51:37572/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84eabae9-6097-17b6-5153-00000cb0e351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/i","pattern":"[url:value = 'http://156.146.24.110:51345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612b68af-a2ab-4e0c-be56-000027ca477d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/i","pattern":"[url:value = 'http://167.250.158.32:40802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e2328c-13d0-16b7-bce4-0000bf2d70ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/gots","pattern":"[url:value = 'http://213.177.179.11/gots']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bcd508-5009-b826-7fc2-0000c4fdda5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.93.190:47055/i","pattern":"[url:value = 'http://123.14.93.190:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79002155-9265-6f1a-1b75-0000129ebc6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/bin.sh","pattern":"[url:value = 'http://125.43.35.24:55742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace6723c-f437-06d6-ae02-00008d6705cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:45429/bin.sh","pattern":"[url:value = 'http://27.204.233.111:45429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62c1752d-a105-263d-5149-00007ac8efea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/bin.sh","pattern":"[url:value = 'http://39.90.145.143:54042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cabaf6-f8d3-75b3-3ac0-000020a42758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/bin.sh","pattern":"[url:value = 'http://182.121.144.189:60356/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9370e9c6-e7ca-6beb-9ac8-0000beed9656","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/i","pattern":"[url:value = 'http://210.208.111.220:51409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e902618b-d6d1-3286-56bd-00008bfe8aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/i","pattern":"[url:value = 'http://124.131.53.180:42721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096cdd7b-ebfb-e733-bb05-0000dc405437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.223.220:38837/i","pattern":"[url:value = 'http://180.252.223.220:38837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c5f737-c4e9-8786-223e-000065a1f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.129.253:43457/bin.sh","pattern":"[url:value = 'http://123.148.129.253:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7493333f-c6fe-996b-0a4f-0000462c40b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://8.138.19.119:9777/linux","pattern":"[url:value = 'http://8.138.19.119:9777/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb11c1b-80eb-36fb-a62b-0000be14d783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/i","pattern":"[url:value = 'http://117.26.226.42:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55299827-e40b-ba4d-f378-0000325e8de0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/bin.sh","pattern":"[url:value = 'http://210.208.111.220:51409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faaf24fd-6388-c581-11cc-0000feebfa08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://gray-dyane-31.tiiny.site/index.json","pattern":"[url:value = 'https://gray-dyane-31.tiiny.site/index.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf6e07d-6bbc-5340-d557-0000a2ff1ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.83.31.27/main/pure.bat","pattern":"[url:value = 'http://45.83.31.27/main/pure.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51886f31-70ef-e93a-127e-0000d0d9b622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/pwcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/pwcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ffe0a0d-2f8d-aa11-3843-00005c44e133","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/img_043214.png","pattern":"[url:value = 'http://178.16.53.176/HTTP/img_043214.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc5215a-be48-d028-02da-0000f2cccd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/crypted1.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338ada5b-ed74-5104-86b1-0000e225c367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2ba57c-4ecd-2b11-8025-0000d6516539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9d0d11-ddd9-0c81-a774-0000d2821d87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cb4a22-d771-a298-6906-0000c99f6bdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b320519e-33df-22a5-fefa-00009b359c3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01672fc5-93e0-0edf-1393-0000a2d8dd92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7772b37a-1791-1525-9190-0000dcf34534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdfc2bea-5a87-1fd9-bf09-00009278533b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cacb83c-b8b0-8dc9-273b-00002a7b9255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3a8a18-ce17-9e6b-8eae-0000e1231e6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cd6af-2a8e-f1c1-13b3-0000e53161a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb6575-9136-97ff-4ce7-0000e2751a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b167cf4-aee5-4cb2-015a-000031e51d32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189c2c22-fa14-5cd9-94d4-00000f3763f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afcff6fa-3306-8124-dabe-000005182a1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d181c1-15c6-41fc-b896-0000b757f2c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a581c1ca-af21-47e2-05d3-000020100324","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a661ef52-5432-5043-8f59-0000781d013b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed761aec-52ba-400d-1f98-00005dc54255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aecdd26-0026-1bc4-fd4c-0000559c6a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffedcb4-125e-21d3-c434-000041a946b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac3c65c-6d77-fd4e-74be-00000e1d7122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949d8595-f616-44eb-5fe2-0000c7e4bcd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d510ca-b88b-2a9a-a490-0000d435627a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1954db1e-e7a5-c98d-c659-0000ec0442f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68da59df-64d1-41bc-3a30-00007fdcea1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e98d2e-62ef-0f04-74e3-0000915e9228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c24da40-dbf0-1eb9-290d-0000c3380146","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65403786-f405-a98a-c20f-0000f715c35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0284d2-9759-0478-4082-0000cb9a984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/cheat_X.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/cheat_X.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f9db90-de7f-39d4-cb27-0000afc8ab15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ab6392-3364-6602-b0ad-000005356b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R6.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e309460-d4de-4425-e0ed-00008f55f112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/hIEGQ.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/hIEGQ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a105b9-8266-1d72-5cd2-0000e25fe7ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93903773-8e1d-fa54-2a0b-0000c2c9a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd05d0a-a1a1-54b6-e0df-00007027314e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67317c84-8fa7-b5b4-78d9-0000c01ec055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d462a0d4-e4c9-9b02-8210-0000734d640b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fb2474-6760-8299-92dd-00007c094ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086e7fa1-dfdc-bb7f-60a7-00002e615b97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e7f8918-add3-9b59-2c1b-0000ccb8f8f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20591c2-5870-9ea8-7eaf-00007e6d48b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68690e4e-d275-d687-91ef-0000249f117e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/muvaro.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/muvaro.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b578b3a-9d6c-2bb8-a699-0000f0f2a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'http://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec02de0-fb8b-191f-8b38-0000e6da0ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/img_203145.png","pattern":"[url:value = 'http://107.175.88.87/22/img_203145.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f2f892-9f83-8fab-20a6-00008537d117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/img_201031.png","pattern":"[url:value = 'http://172.245.209.133/70/img_201031.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd79b9d8-de95-1398-6d3b-00006b32fdb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta","pattern":"[url:value = 'http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e829e11-0d98-0b98-615f-000005e6c91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/DAD/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/DAD/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df009767-67d4-66aa-2364-000087ee8409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/POT/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/POT/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80b72bc-ad31-37c1-0de4-0000b2e9809e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://effectively32.infinityfree.me/img_072806.png","pattern":"[url:value = 'https://effectively32.infinityfree.me/img_072806.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68918ac6-5386-1bbd-7f69-000027307c27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05447cf-7a18-1a35-5a60-0000bdbbd82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.103/sshd","pattern":"[url:value = 'http://94.154.43.103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a8a712-c418-1e89-6cc8-0000d29f3343","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i686","pattern":"[url:value = 'http://94.154.43.236/exodus.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13c29da-8e65-5f1d-7096-00001f4116f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mips","pattern":"[url:value = 'http://94.154.43.236/exodus.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf36deeb-6630-a6b5-a6e9-000081c00728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sh4","pattern":"[url:value = 'http://94.154.43.180/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6366143-40ef-95f9-8374-000035f6b9be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sh4","pattern":"[url:value = 'http://94.154.43.236/exodus.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d85feb-02be-941c-5953-0000e4ea6157","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv6l","pattern":"[url:value = 'http://94.154.43.180/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4a524a-c74f-f969-d1f5-000097ffda0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm5","pattern":"[url:value = 'http://94.154.43.236/exodus.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee194b-9d56-b500-f5d5-0000540b41ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i586","pattern":"[url:value = 'http://94.154.43.236/exodus.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc36eaa-1357-d98a-8ae7-0000d98a48e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv7l","pattern":"[url:value = 'http://94.154.43.180/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4d62dc-a4a7-8290-1f25-00002f43bd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm4","pattern":"[url:value = 'http://94.154.43.236/exodus.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650117c-0ab6-7bd4-b880-0000912fa6e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sparc","pattern":"[url:value = 'http://94.154.43.236/exodus.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d101d0c-41e3-f19e-7d80-00001fb7c02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.m68k","pattern":"[url:value = 'http://94.154.43.236/exodus.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090802bf-8854-b92f-8449-00000699163a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mips","pattern":"[url:value = 'http://94.154.43.180/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724303f0-223f-9224-62fc-0000854a75e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm6","pattern":"[url:value = 'http://94.154.43.236/exodus.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef50c28-af57-9bdd-0e1c-0000a34a1b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv5l","pattern":"[url:value = 'http://94.154.43.180/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05443366-64f3-42fd-efd7-00003df61280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm7","pattern":"[url:value = 'http://94.154.43.236/exodus.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab50b080-10ef-ad74-d829-00009aeda1c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sparc","pattern":"[url:value = 'http://94.154.43.180/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90047a3d-7d18-4d24-b283-00000a786698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mipsel","pattern":"[url:value = 'http://94.154.43.180/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd62605a-0610-22f4-a2e8-0000531c85a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.x86_64","pattern":"[url:value = 'http://94.154.43.180/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ee3d69-b36d-6c1e-bc0d-00009e2a3237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv4l","pattern":"[url:value = 'http://94.154.43.180/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83648314-e6d5-644f-70f2-0000b5282048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.ppc","pattern":"[url:value = 'http://94.154.43.236/exodus.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65db5ec-895d-a81e-cd20-0000d8e61b68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.powerpc","pattern":"[url:value = 'http://94.154.43.180/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64eeef13-d045-ffec-06a7-0000744278bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mpsl","pattern":"[url:value = 'http://94.154.43.236/exodus.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed6b2da-e954-8e31-18cf-0000cd2b4e3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.x86","pattern":"[url:value = 'http://94.154.43.236/exodus.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45243669-1635-4afd-3e1e-0000066fc0e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.m68k","pattern":"[url:value = 'http://94.154.43.180/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3dec87-5dd4-41be-2c76-0000baafb874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a43ba3-06c2-132e-6cca-0000c2412efb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://wealthishealth.free.je/img_234525.png","pattern":"[url:value = 'https://wealthishealth.free.je/img_234525.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f1c554-773e-0f3b-043e-0000e3f422bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/SO_08072026.rar","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/SO_08072026.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d02273c-3844-ae66-bed3-0000edcc8a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bc95a3-4113-9791-ce3f-0000e1a927df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://89.23.107.5/m/jscotbpl.dat","pattern":"[url:value = 'https://89.23.107.5/m/jscotbpl.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594bc740-c084-eac3-b3ea-0000e15911a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meridia.rs/filess/Teleg.exe","pattern":"[url:value = 'https://meridia.rs/filess/Teleg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0aa025a-d9d5-baee-a901-00009168c67c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/steepleadmit.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/steepleadmit.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33c14e4-c734-d1e2-967e-00005b5c96a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/electricityjog.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/electricityjog.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5339bafb-13c5-3b60-f37b-00000cc817f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12d7373-231d-b2a3-4b4a-0000e30ce526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3707c6ed-f4d9-c3e2-c56f-00005688e301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232f9ec8-5077-be77-16aa-00002fd918b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a553b7c-b0f5-3c30-1342-00008e2e9e53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/bin.sh","pattern":"[url:value = 'http://61.156.97.162:50385/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d281863b-8f4a-1dd7-46ec-00002b2ec376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/bin.sh","pattern":"[url:value = 'http://116.59.13.48:57768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b13cfef-1246-e077-67f2-00009e145807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/i","pattern":"[url:value = 'http://61.156.97.162:50385/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d52b82c-38cf-052f-6529-00006c58ee6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://yakult-hk.com/DDOS.zip","pattern":"[url:value = 'http://yakult-hk.com/DDOS.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f901d84-8e8d-9957-44de-00001d290935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/bin.sh","pattern":"[url:value = 'http://123.14.185.19:44899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d3d92a-9484-aa7d-774f-00008e8c7bf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.118.111:40216/i","pattern":"[url:value = 'http://110.37.118.111:40216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7efad9f-6777-5d25-6ca3-000029258799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/bin.sh","pattern":"[url:value = 'http://159.255.7.120:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af4847e-5b3c-3d64-117f-00004f266bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/i","pattern":"[url:value = 'http://123.14.185.19:44899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffe5662-9325-e4d5-af61-000009c17fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/i","pattern":"[url:value = 'http://116.59.13.48:57768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05604c9f-d21c-c4c4-b053-00001347db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.17.189:45420/i","pattern":"[url:value = 'http://182.121.17.189:45420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef80b587-bc62-5b3e-dbbd-000064069199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.8.131.222:37740/i","pattern":"[url:value = 'http://27.8.131.222:37740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d13a441-20ee-7b40-1452-0000cbfb9a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.10.99:39779/bin.sh","pattern":"[url:value = 'http://123.129.10.99:39779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2104c949-6a25-c5dc-8ba4-000096685bde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/bin.sh","pattern":"[url:value = 'http://196.189.98.110:42979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bee8b584-56f3-0b8b-a1c9-00002529c6fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/bin.sh","pattern":"[url:value = 'http://123.14.181.142:56703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c461d1-e189-6397-277f-000098d246b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/windows","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/windows']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--843a0d62-0733-2f6b-410d-0000cc87fd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/linux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b44b8b-585d-65bf-75cf-0000c69750b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/mac","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/mac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcb5055-955a-e0dc-5615-0000280cefa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/bin.sh","pattern":"[url:value = 'http://124.95.24.225:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f4e67a-2d6a-9c15-8946-00001fe4ca60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/i","pattern":"[url:value = 'http://123.14.181.142:56703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf4b338a-4424-a78d-e1dc-00000db1261f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/bin.sh","pattern":"[url:value = 'http://222.137.25.131:51261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d136039-80f2-705c-00f6-00003e8fb1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/i","pattern":"[url:value = 'http://124.95.24.225:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd47610-5753-1970-f960-0000108b2e9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/bin.sh","pattern":"[url:value = 'http://125.41.8.245:37624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1ac36e-1d4a-9457-af7f-0000ab8ade39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/i","pattern":"[url:value = 'http://222.137.25.131:51261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6d0d68-79f8-4a40-18fa-0000341fbc92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/i","pattern":"[url:value = 'http://196.189.98.110:42979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c44b5-9bf7-8932-60bf-0000dc9cfefc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.22.216:46217/i","pattern":"[url:value = 'http://110.37.22.216:46217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a85dba9-f738-97a1-57e9-0000ddc14850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.24.27.232:57681/i","pattern":"[url:value = 'http://218.24.27.232:57681/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e6111d-c2db-2eb1-a332-0000fa381199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/i","pattern":"[url:value = 'http://110.36.72.194:41902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c144434-8dd6-7557-4da9-000059db56c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/bin.sh","pattern":"[url:value = 'http://123.5.148.113:60247/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c15894-a23c-2667-da2d-0000906d700c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/i","pattern":"[url:value = 'http://123.5.148.113:60247/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2e33b8-9bf4-e663-5379-000017868287","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/sc.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/sc.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--038d247f-65b5-4dfd-a405-0000c93a74fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/exe.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/exe.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad608ac7-1cb7-60f9-ae44-0000ec48d45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/6.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/6.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa73a8ec-fd25-d9e6-317e-0000fb5c7af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--989207b4-4d1f-68ed-9b25-000067617755","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/oldboss","pattern":"[url:value = 'http://rippled.cleverpondky.com/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbc1f90-283e-235f-bd28-000006e80ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/checkmacos.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f646456c-0c29-9cbb-7050-0000a70a28f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traffaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab19061-d121-eac7-539c-00007044ede3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cliaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc084d49-8c05-3c4d-b128-0000c0314a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/proot","pattern":"[url:value = 'http://rippled.cleverpondky.com/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c31947-3bd8-38a9-ec50-000018cee44e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check1.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3250288-7049-164f-080e-00006262b9b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9a324c-4219-bd52-b09d-0000705c1f0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto1","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887deef8-fceb-d1a7-7635-0000a1e8b4ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cli","pattern":"[url:value = 'http://rippled.cleverpondky.com/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6a0f0a-48ec-65b4-1eb9-0000d31e549e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.80.33:54187/Mozi.m","pattern":"[url:value = 'http://115.51.80.33:54187/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3882caac-21df-07ea-7901-000016b73c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/Error84","pattern":"[url:value = 'http://rippled.cleverpondky.com/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66aa9fe6-ae2f-5ee1-984b-000099c335f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/wd1337","pattern":"[url:value = 'http://rippled.cleverpondky.com/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe714c3b-6c02-c8cf-2b52-0000a7860e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/syst3md","pattern":"[url:value = 'http://rippled.cleverpondky.com/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d5db07-1fdd-d1fd-cfbd-0000654c69e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/nvidia.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a237eb2c-0434-30a7-3310-0000c01675a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/boss","pattern":"[url:value = 'http://rippled.cleverpondky.com/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb4d701-0caa-e8c3-3cae-0000f7c10b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/log","pattern":"[url:value = 'http://rippled.cleverpondky.com/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--216d0c82-c0f1-d3cf-3cd3-00008971d888","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traff","pattern":"[url:value = 'http://rippled.cleverpondky.com/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a130b84-01ef-f81a-a654-000075006ecd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/bin.sh","pattern":"[url:value = 'http://124.94.125.230:34268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684b83df-94ed-b974-5d32-00008303645b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/package","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/package']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5271bd-ea07-00b7-04cd-00008ab1507e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstrap","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstrap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e2e217-dea3-c1a7-a240-0000cf53e2a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quick-load.vercel.app/api/settings/env","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/env']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cca01b0-7a87-aa8f-7356-00005382a15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.12:50068/i","pattern":"[url:value = 'http://115.56.147.12:50068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c748cd43-ccd4-7c41-04c8-000080f91651","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.230.18.121:41849/bin.sh","pattern":"[url:value = 'http://115.230.18.121:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4995ac20-6297-67b9-6a75-00004eec9729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/bin.sh","pattern":"[url:value = 'http://42.87.190.196:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9701f0-c491-d662-0e6a-000036c201b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/bin.sh","pattern":"[url:value = 'http://110.36.72.194:41902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8428eac-20df-bee7-ffe9-000019c6740b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/bin.sh","pattern":"[url:value = 'http://115.56.10.15:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3879d905-1721-b1d5-ab42-00008b9e30b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/i","pattern":"[url:value = 'http://42.87.190.196:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ad9130-b4d1-ef23-2c16-00001020c472","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/bin.sh","pattern":"[url:value = 'http://221.15.195.117:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--890601e8-103b-976a-4ba3-0000a3ff504b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/i","pattern":"[url:value = 'http://115.56.10.15:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e603698-d5c9-97a1-674f-0000c3d85c55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/bin.sh","pattern":"[url:value = 'http://42.239.231.246:37689/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d056c7-3a17-6f05-8035-00000aa4ed3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/i","pattern":"[url:value = 'http://221.15.195.117:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198f5b41-826d-11fa-d7fd-0000a166b86e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/i","pattern":"[url:value = 'http://42.239.231.246:37689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a383ad-b259-c2f8-377f-00007aa7b27e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/bin.sh","pattern":"[url:value = 'http://222.142.223.175:57022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01609c-f871-b850-f87c-000012855fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/bin.sh","pattern":"[url:value = 'http://182.116.88.229:47375/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85e272f-5fba-0d77-6707-000091718a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.234.134:45451/bin.sh","pattern":"[url:value = 'http://182.122.234.134:45451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d738e191-984a-6663-a986-000067c0ed8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/bin.sh","pattern":"[url:value = 'http://175.151.217.170:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b55ed7e1-cb44-b0e2-5550-00001efcd0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.116.98:56771/i","pattern":"[url:value = 'http://124.94.116.98:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d01189-3174-0427-cfbe-0000cf98940d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/bin.sh","pattern":"[url:value = 'http://196.189.68.239:60182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7993e-a054-a0fa-68c2-00002f059a14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/i","pattern":"[url:value = 'http://123.10.146.56:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62187c11-5485-c3ac-295c-000079742227","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/i","pattern":"[url:value = 'http://182.116.88.229:47375/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22fcbe90-86d9-9bcb-95d5-0000c728c07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e5500","pattern":"[url:value = 'http://130.12.182.77/main.e5500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e73b905-a5b0-c533-4018-00000eb6b23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32","pattern":"[url:value = 'http://130.12.182.77/main.mips32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--320a0fe7-4647-39b7-fde0-00003f967668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64r6el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64r6el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26044ea8-c9d8-20ad-35aa-00004a8aefc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.m68k-68xxx","pattern":"[url:value = 'http://130.12.182.77/main.m68k-68xxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9f2ce9-d8fd-9bba-ab99-00000bc44b36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe79f59-37e5-f3ca-45e7-00005facb1c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/i","pattern":"[url:value = 'http://175.151.217.170:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c91903-eab3-9096-c961-00008f88287f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparcv8","pattern":"[url:value = 'http://130.12.182.77/main.sparcv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b02dc1-51a7-bcbc-c11b-00008f505008","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8","pattern":"[url:value = 'http://130.12.182.77/main.power8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3049117e-3655-2704-33a5-0000f6c0dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e6500","pattern":"[url:value = 'http://130.12.182.77/main.e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098bbba0-4226-2672-cbd7-00005055351c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.ppc440fp","pattern":"[url:value = 'http://130.12.182.77/main.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a7107e-f0bd-691a-fafa-0000a869246e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r5el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r5el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc96da0-9dd7-762d-8184-00001fe5771d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.aarch64be","pattern":"[url:value = 'http://130.12.182.77/main.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecadcf8-65bc-aa4e-cf2b-0000199dc695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v4","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9983dc-2cab-4bd6-e139-0000e9986928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-i7","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-i7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2277ab49-a305-dc30-98d4-000008af727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8le","pattern":"[url:value = 'http://130.12.182.77/main.power8le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae495b-3c68-b01b-6e87-0000844afe2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v3","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caae28f-49ae-87f0-cbcc-00004454c207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1452997d-75a8-c397-6377-00008db9bf32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64","pattern":"[url:value = 'http://130.12.182.77/main.x86-64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5999ca-fa9a-158e-c97a-0000da7a8ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-core2","pattern":"[url:value = 'http://130.12.182.77/main.x86-core2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e1ae27-f328-61fe-2db9-00002efd56c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r6el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r6el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a979cd-a519-aff5-1c0a-00003cf69949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v2","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ab3a8-439d-f9f3-d03c-0000374e7d42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.s390x","pattern":"[url:value = 'http://130.12.182.77/main.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a54c80e-cd5d-8da3-c92d-000091cda015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-i686","pattern":"[url:value = 'http://130.12.182.77/main.x86-i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5f63be-b6b7-72c7-6dba-00008eb2e27b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e500mc","pattern":"[url:value = 'http://130.12.182.77/main.e500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8691e00c-e8c2-833f-3f5c-0000241aec72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4aeb","pattern":"[url:value = 'http://130.12.182.77/main.sh4aeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0404546d-e0eb-8705-75ab-00006dc34190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/f","pattern":"[url:value = 'http://130.12.182.77/f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d061a2d-ef42-36bf-94cc-00009dadcf8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparc64","pattern":"[url:value = 'http://130.12.182.77/main.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a1f20ed-bf78-c018-821a-00004dc02f90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4musl","pattern":"[url:value = 'http://130.12.182.77/main.sh4musl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55cbdad-75c3-2ab5-e57c-000016604662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/i","pattern":"[url:value = 'http://196.189.68.239:60182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e025c85-1133-1b15-1553-0000eb88efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/bin.sh","pattern":"[url:value = 'http://115.63.150.75:33073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4d565b6-007e-13c7-73a5-0000db967e01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/i","pattern":"[url:value = 'http://115.63.150.75:33073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6987bb59-1cfb-8721-ec11-0000e3f63108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/i","pattern":"[url:value = 'http://222.142.223.175:57022/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5961a06a-8238-68cc-4b0f-00002584e626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/i","pattern":"[url:value = 'http://124.94.125.230:34268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16904ecc-64e6-e02f-59ff-0000f236db53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/i","pattern":"[url:value = 'http://123.4.234.31:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee54e51-d420-0a9a-c74f-00002792756b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/bin.sh","pattern":"[url:value = 'http://105.186.140.157:48423/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4730c387-4f34-7c0f-be95-0000d602fccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:36981/i","pattern":"[url:value = 'http://120.28.194.160:36981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bf6219-f42b-50b4-7363-0000eb947ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.246:46289/i","pattern":"[url:value = 'http://123.4.234.246:46289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b69ce9-3817-6d31-48ef-0000adb37db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.216:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea315355-bf61-3608-350c-00005e49a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/i","pattern":"[url:value = 'http://105.186.140.157:48423/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551a6d3e-29fa-5b02-1a95-0000f7b261f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/i","pattern":"[url:value = 'http://125.43.107.216:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962d0e14-dd20-d3b8-4668-000034053f6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.49:47371/i","pattern":"[url:value = 'http://125.43.0.49:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee49def8-ba36-33d1-0154-00005f1a768d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/bin.sh","pattern":"[url:value = 'http://119.186.208.189:49406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b005f-3dbf-801d-25b5-000019f3e520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mipsel","pattern":"[url:value = 'http://94.183.233.225/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1472d27d-4af5-8425-7fb1-0000a55a0934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mips","pattern":"[url:value = 'http://94.183.233.225/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb7d455-72f5-2185-2417-00002e508f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/bin.sh","pattern":"[url:value = 'http://123.8.40.241:54434/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a16ab62-3fde-989a-c96b-000006028ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86","pattern":"[url:value = 'http://94.183.233.225/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5903997b-c05e-72f1-72df-00009558a2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm4","pattern":"[url:value = 'http://94.183.233.225/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159eaae2-a9c9-6635-8b15-00001d4fab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_powerpc","pattern":"[url:value = 'http://94.183.233.225/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27d1a38-85ec-3a3f-ca4b-00004097061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86_64","pattern":"[url:value = 'http://94.183.233.225/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70df857-4b3a-8923-0945-00003f516a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm6","pattern":"[url:value = 'http://94.183.233.225/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e04a9ed-4491-a550-5fe9-00002de4c5ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm5","pattern":"[url:value = 'http://94.183.233.225/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00ac8c1-e5d4-cac2-b827-000087ed0d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm7","pattern":"[url:value = 'http://94.183.233.225/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0260513f-3e9a-7cfa-a256-00003553ea4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/i","pattern":"[url:value = 'http://123.8.40.241:54434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d696c51a-e25b-a1a8-a571-00004a2676a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.67.222:54368/i","pattern":"[url:value = 'http://115.56.67.222:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489fc370-334a-ee55-8ae2-000020e027ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/i","pattern":"[url:value = 'http://219.157.10.128:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26285b0-24dc-b155-0a0e-0000d460d706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/i","pattern":"[url:value = 'http://119.186.208.189:49406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cef7605b-cb34-d8e4-2848-0000d2bb8829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/bin.sh","pattern":"[url:value = 'http://182.126.213.80:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af0f546-bea0-6714-05b0-0000541753a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/i","pattern":"[url:value = 'http://182.126.213.80:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--608dd15b-f79e-cafa-6bf2-00009fb58f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/bin.sh","pattern":"[url:value = 'http://124.6.165.86:44671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da818090-319f-3a7b-03c2-0000a859d679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/bin.sh","pattern":"[url:value = 'http://124.234.239.227:55577/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b384ca8-39df-3675-5ee8-000057d3f1da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/i","pattern":"[url:value = 'http://61.52.7.68:35582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15af8391-fee2-0427-af90-00005e60e28d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/i","pattern":"[url:value = 'http://124.6.165.86:44671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da311577-cc43-b382-6fb4-0000c3a3dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/i","pattern":"[url:value = 'http://119.109.140.49:40757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e43a256-ec9e-69d8-c395-0000efa3d9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/i","pattern":"[url:value = 'http://124.234.239.227:55577/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292cd8b9-f204-91fe-c931-000045c0a3ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/molakc","pattern":"[url:value = 'http://178.16.54.109/molakc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a98c6c7-ec7a-32e5-af3f-000003e2ae5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.115.143:48808/i","pattern":"[url:value = 'http://182.116.115.143:48808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9251e248-1f6c-e065-adc1-0000fadb6948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/bin.sh","pattern":"[url:value = 'http://182.113.2.97:36675/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f89076-0be5-c6a5-291c-0000662da1ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/i","pattern":"[url:value = 'http://182.113.2.97:36675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af81952c-d224-1fa9-19a6-000053a8376c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/bin.sh","pattern":"[url:value = 'http://115.56.42.114:53571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e308fde-034c-1ef2-8915-0000e9a3e9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/i","pattern":"[url:value = 'http://115.56.42.114:53571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11778cd6-f2ed-4a9f-874d-000024253fe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/bin.sh","pattern":"[url:value = 'http://115.48.163.9:60317/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44f7615-f51b-00e0-b39e-0000719da6e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/rew3rtghymrag7y/file","pattern":"[url:value = 'https://www.mediafire.com/file/rew3rtghymrag7y/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6b07a4-242a-8ef9-beaf-0000bf269eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5d7c6e-acf9-dc51-c771-0000206fb8ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.252.178.228/update1.zip","pattern":"[url:value = 'http://192.252.178.228/update1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f81e0ca-5783-7e2a-e3ef-0000ac8f16fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://199.217.99.6/Troubleshoot.ps1","pattern":"[url:value = 'http://199.217.99.6/Troubleshoot.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b853ca9d-64cf-fe16-548a-0000c2ca513f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41335f5-d115-d9a8-efa2-000061f67729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9602e5b-aaf3-6fdb-7e2a-0000d22aec32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a17c429-c5de-26e3-9e39-0000efafaf46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3cb5d9-786a-f4b9-c1b7-0000c0f36df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.386","pattern":"[url:value = 'http://92.5.66.49:8080/bot.386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04104d5b-b55b-d68a-446f-0000ccffa5d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9338921-2893-3285-aab7-000098682bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.riscv64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29046e46-c835-80de-c3c2-00007c7236c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46b1e21-4a91-a199-f99c-0000c3d8ee92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mipsle","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b60f4-3335-36f5-6848-00008ffa0c42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1ee21e-abc0-0e87-2d76-000074896776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.s390x","pattern":"[url:value = 'http://92.5.66.49:8080/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c359a16-b643-c76e-fd6d-000031c03c93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b3b4a-e0a5-dec2-c2c0-0000cfa3f896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2199de09-ea3b-deeb-42c2-00006dcfbd71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/Mozi.a","pattern":"[url:value = 'http://221.15.226.18:57698/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b849b3-b465-297c-726d-0000d76fcac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.amd64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73bc9a6-169a-27c5-9bdf-000082b0e1a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/i","pattern":"[url:value = 'http://115.48.163.9:60317/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e834f52-fb03-1b72-dd6f-0000981e3e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/bin.sh","pattern":"[url:value = 'http://123.11.207.175:45931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de246fbe-8d65-9339-0e05-0000e5d005d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18332b81-9386-9166-afcb-0000dd21a87e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e55fd5","pattern":"[url:value = 'http://5.182.210.174/e55fd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10179294-710b-31a3-b10b-0000cec838cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xkw","pattern":"[url:value = 'http://129.121.110.105/xkw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d118c4f7-16fc-4077-3fb8-0000f807aa36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/759f0d","pattern":"[url:value = 'http://5.182.210.174/759f0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef0dc74-5c6c-4a58-75a6-000037befdd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Y3P","pattern":"[url:value = 'http://129.121.110.105/Y3P']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b947860e-715b-5e27-2240-00007b8983e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2NXl","pattern":"[url:value = 'http://129.121.110.105/2NXl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fa6eca-b715-a60b-0fb6-0000ce580be6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4f193","pattern":"[url:value = 'http://5.182.210.174/f4f193']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0469762f-2f42-fb40-acaf-00008a6c43fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/783f2a","pattern":"[url:value = 'http://5.182.210.174/783f2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e3b52d-4fc3-99b2-ae93-00006452790a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/99764f","pattern":"[url:value = 'http://5.182.210.174/99764f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ddad4e-d447-70a1-d54d-00006db989ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0eaa32","pattern":"[url:value = 'http://5.182.210.174/0eaa32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c38ad1-c24f-6f3a-8ca4-0000bb3cf9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/yx2w","pattern":"[url:value = 'http://129.121.110.105/yx2w']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f144b20-cc9e-f4a1-d5ee-0000c56c41e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/19e860","pattern":"[url:value = 'http://5.182.210.174/19e860']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597f1472-0d8a-79f6-5cc5-00004d174231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/lWC","pattern":"[url:value = 'http://129.121.110.105/lWC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e4990e8-9a60-5c1e-c75d-00002dc6b7f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Wqm","pattern":"[url:value = 'http://129.121.110.105/Wqm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67d809d-7ddc-9e0b-ed79-0000148afb01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6c209","pattern":"[url:value = 'http://5.182.210.174/d6c209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6c589f-2222-2bb8-cec8-0000345f4046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/747c0d","pattern":"[url:value = 'http://5.182.210.174/747c0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767a3800-db89-4508-89c7-000053396101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fXd","pattern":"[url:value = 'http://129.121.110.105/fXd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231b461e-f1bd-b592-3ccd-0000ce88ea98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f39a8e","pattern":"[url:value = 'http://5.182.210.174/f39a8e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b02cc0-cea1-b45c-a2d3-000097890b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/704581","pattern":"[url:value = 'http://5.182.210.174/704581']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29cf242b-e017-861b-d27e-00003a5dd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef363f","pattern":"[url:value = 'http://5.182.210.174/ef363f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a365d07c-d732-f055-36a3-0000157d84f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/575708","pattern":"[url:value = 'http://5.182.210.174/575708']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78156e6-a10c-cf01-3eef-00002f47a02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cd049e","pattern":"[url:value = 'http://5.182.210.174/cd049e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc6244e8-f432-d460-da7d-0000642e4e0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f91198","pattern":"[url:value = 'http://5.182.210.174/f91198']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1a35f-ffa0-b9d8-6f42-0000c1b1113c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/rG3i","pattern":"[url:value = 'http://129.121.110.105/rG3i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a090cb-cb76-860f-9c41-0000ce1b1568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cf53f","pattern":"[url:value = 'http://5.182.210.174/6cf53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64ec990-f479-9d7a-f2db-00008239fd08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/RzWf","pattern":"[url:value = 'http://129.121.110.105/RzWf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f236bbf-f863-f577-5006-00001e1a3fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f818ff","pattern":"[url:value = 'http://5.182.210.174/f818ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1a6e08c-90bf-12d8-e701-00007d9252ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/7uv8","pattern":"[url:value = 'http://129.121.110.105/7uv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced9603f-ecb3-21ec-377d-000041b3e61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xl01","pattern":"[url:value = 'http://129.121.110.105/xl01']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2d8e20-adc4-436f-9e8e-00002ce4ea73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e8e811","pattern":"[url:value = 'http://5.182.210.174/e8e811']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e159841-5fc0-271b-6128-0000516b468e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b0256","pattern":"[url:value = 'http://5.182.210.174/3b0256']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df249d2-c2ee-993d-2ee9-00000873c3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5b334","pattern":"[url:value = 'http://5.182.210.174/a5b334']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa1c95d-e625-3d48-48eb-00002bfb078b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/04e832","pattern":"[url:value = 'http://5.182.210.174/04e832']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e55471-4312-7c71-7d80-0000aff2c936","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/C1iC","pattern":"[url:value = 'http://129.121.110.105/C1iC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad177a19-7341-e8c6-34be-0000b182c947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4vqU","pattern":"[url:value = 'http://129.121.110.105/4vqU']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848f2744-17c3-9da1-6d39-000024274ce2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4yKQ","pattern":"[url:value = 'http://129.121.110.105/4yKQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b6dc14-61ef-f2ef-5d0d-0000e0d6d2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8a320b","pattern":"[url:value = 'http://5.182.210.174/8a320b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f8686f-12d8-49f2-6d1e-0000a9bf5280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ot7","pattern":"[url:value = 'http://129.121.110.105/ot7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8b074e0-f323-d013-269d-0000dda69ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/21a9d4","pattern":"[url:value = 'http://5.182.210.174/21a9d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d78c006-aa73-196b-1563-000065df1701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/44e32f","pattern":"[url:value = 'http://5.182.210.174/44e32f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef4187c-b8ff-07e8-a598-000091567ab8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstraplinux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstraplinux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842265f6-a7e7-1ef1-0e5e-000088d5944e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc8b91","pattern":"[url:value = 'http://5.182.210.174/cc8b91']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25058f6e-0a27-7565-f4bd-00007a4ed3aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/80b16f","pattern":"[url:value = 'http://5.182.210.174/80b16f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeafc524-7d28-09b0-c84c-00003bd6364e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/82c703","pattern":"[url:value = 'http://5.182.210.174/82c703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2303af9-1b48-4de2-4119-00004d13e386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/924208","pattern":"[url:value = 'http://5.182.210.174/924208']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8d5afe-10f1-6f79-500e-00009871516b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2ca244","pattern":"[url:value = 'http://5.182.210.174/2ca244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c3a833f-3d08-b21c-66ce-00000de3f575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7215c9","pattern":"[url:value = 'http://5.182.210.174/7215c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86263e16-14ca-6149-a4d7-00007f15046a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fd89ab","pattern":"[url:value = 'http://5.182.210.174/fd89ab']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ebece3-cb8a-df7e-58e3-00009ac1ac92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fb21f1","pattern":"[url:value = 'http://5.182.210.174/fb21f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d54d1ab-47f8-4fdd-2d36-0000d57e96f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/690e95","pattern":"[url:value = 'http://5.182.210.174/690e95']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e284dc10-ddae-4ccc-55f0-00002f082b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/32441c","pattern":"[url:value = 'http://5.182.210.174/32441c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60efa7f1-06be-378f-3f3a-0000918389ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/22393a","pattern":"[url:value = 'http://5.182.210.174/22393a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985b24d5-74fc-a32f-ed6b-00007265db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb5263","pattern":"[url:value = 'http://5.182.210.174/eb5263']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b13d90b-59cd-90e5-59e2-00002c67954c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.243.228.138:53440/bin.sh","pattern":"[url:value = 'http://42.243.228.138:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--816a97a0-4d7d-6fe6-9b3c-0000be698cd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://114.227.48.185:58022/bin.sh","pattern":"[url:value = 'http://114.227.48.185:58022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28183dcb-ab75-e400-9f9c-00001008eccf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d83cda1-ae05-5282-7ede-00002629090d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a9ad4f-47ae-456e-f187-00003b1356bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211c1f-2963-baf7-a1f9-00004912ec9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://citrusmangos.ct.ws/img_112634.png","pattern":"[url:value = 'https://citrusmangos.ct.ws/img_112634.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3c6733-70ca-fd81-7559-0000d7889f7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e988b3-f2bc-026f-e24e-000019e24dfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428f67c5-ff03-1adc-c5ef-000034a97296","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/quis.exe","pattern":"[url:value = 'http://91.92.47.8/quis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e56624-caf2-29ba-9c89-000028f57106","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/CW.exe","pattern":"[url:value = 'http://91.92.47.8/CW.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d340a48-d88e-6fcc-ad5b-000051a48594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/bin.sh","pattern":"[url:value = 'http://221.235.197.3:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fbfacb-7d32-1232-b890-0000adb01e15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f261eba8-e18a-f346-68bb-0000a422326d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebba93d-cea7-52b6-96a1-0000fbb35ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.79.201:45777/i","pattern":"[url:value = 'http://42.226.79.201:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3dfeabe-552c-1dd7-713a-0000894b4244","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19855277-81e9-3ac1-7fc1-0000b097731b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219915ba-e074-184a-c1de-000082d9f3bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c3d6b69-b78d-77ed-518a-00006d114b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4daec17a-5ebb-408b-4d01-00004e9fc085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/i","pattern":"[url:value = 'http://221.235.197.3:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fbe47-3037-b4b5-a9cf-000050346012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d22fcd-5b20-effd-51bb-000017c0cb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/bin.sh","pattern":"[url:value = 'http://221.15.204.212:38964/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c64cfef-0d31-888c-1584-00005075bc7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7524844-66a5-d572-8025-00003e2095c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59153ed6-83c4-33da-5674-0000516af3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f590799f-ee5f-2f70-effa-00000ccbeb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d210b2e-448c-fad4-2b61-00006938e79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.185.120:41148/i","pattern":"[url:value = 'http://115.63.185.120:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fc112d-85c5-a040-5db0-000023310d3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/i","pattern":"[url:value = 'http://110.37.106.148:49825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77246e53-178f-fb15-63b9-00005df177c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6a86a9-d343-4b3b-72e6-0000e2619495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/i","pattern":"[url:value = 'http://42.237.82.34:58954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf0210a-9dee-c974-5493-0000c8c327dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/bin.sh","pattern":"[url:value = 'http://42.237.82.34:58954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64455cc3-71d5-e095-5c2e-00007727ca94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c7a26","pattern":"[url:value = 'http://5.182.210.174/2c7a26']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e50b032a-5cae-f49e-9cc0-00007d530c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a59ff","pattern":"[url:value = 'http://5.182.210.174/1a59ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12433559-2b18-0542-4a46-0000daff821f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/155a79","pattern":"[url:value = 'http://5.182.210.174/155a79']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65065a-c755-0d1f-f070-0000fedfdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35c40c","pattern":"[url:value = 'http://5.182.210.174/35c40c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d759de5-ada3-7b07-14cf-0000bfdf262c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b136a3","pattern":"[url:value = 'http://5.182.210.174/b136a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee6ca626-8f06-260f-c654-000074ef490e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2419f5","pattern":"[url:value = 'http://5.182.210.174/2419f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f5a66b-4cbf-cb74-aca3-0000857e7cf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07aedd","pattern":"[url:value = 'http://5.182.210.174/07aedd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85851043-b370-0fd5-51b1-000051ba134c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b63d70","pattern":"[url:value = 'http://5.182.210.174/b63d70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d32951ab-6c4a-e917-bbd2-0000c0490385","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/60689f","pattern":"[url:value = 'http://5.182.210.174/60689f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09991385-df96-b16d-b4c9-0000fbb4f6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d77667","pattern":"[url:value = 'http://5.182.210.174/d77667']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe113ad-4182-86dd-c197-0000933418be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c3474","pattern":"[url:value = 'http://5.182.210.174/0c3474']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec6806e-0b25-cf6f-6ffe-0000ffbb5c04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a4b8b","pattern":"[url:value = 'http://5.182.210.174/4a4b8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ea3f9e-8096-6660-7e67-00001bfaf1db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/i","pattern":"[url:value = 'http://221.15.204.212:38964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502fcb55-77f4-152c-1c19-00001dde9a79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/i","pattern":"[url:value = 'http://123.11.207.175:45931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0589fdc-0d8b-70ce-0588-0000e38cc619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.22.108:50309/i","pattern":"[url:value = 'http://123.12.22.108:50309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a804d4-68b3-fadd-bfd0-0000c2973624","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/bin.sh","pattern":"[url:value = 'http://182.113.205.38:37725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a6af18-730c-b1a7-2708-0000f069118e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/bin.sh","pattern":"[url:value = 'http://182.114.243.24:39493/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3feef34-e2ae-3f64-a1d6-000054f73819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/i","pattern":"[url:value = 'http://182.114.243.24:39493/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--225ba1e5-1106-ef9a-aac9-000010fa5213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/bin.sh","pattern":"[url:value = 'http://112.248.190.70:45710/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de13ddc-baf8-ed56-0b5c-0000cd0013f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/bin.sh","pattern":"[url:value = 'http://123.11.10.99:56358/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fd9874-7f77-1362-661e-0000dd1a0b94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/i","pattern":"[url:value = 'http://112.248.190.70:45710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fa0db6-bfef-6aad-c291-0000dd63a215","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/bin.sh","pattern":"[url:value = 'http://182.122.195.212:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07ba0179-7088-3589-f49c-00009df97da5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/bin.sh","pattern":"[url:value = 'http://123.5.83.209:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6870ffd3-74c5-37af-fb2b-0000b89842e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.25.235.194:33174/i","pattern":"[url:value = 'http://112.25.235.194:33174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ae65fb-aaa4-2579-42fa-00006403c8b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/i","pattern":"[url:value = 'http://108.168.0.60:36003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed06863-6d03-b2bb-aede-000095100332","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/bin.sh","pattern":"[url:value = 'http://123.10.146.56:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--170aa561-5641-8a11-c687-00008ec6451c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/bin.sh","pattern":"[url:value = 'http://110.37.58.92:44731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb2d97a-11fc-3b77-9e64-0000d88504b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.224.216/zedx","pattern":"[url:value = 'http://147.182.224.216/zedx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd97d33-3f55-8876-35ee-0000b7c57383","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/i","pattern":"[url:value = 'http://113.228.117.193:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643c5870-467a-a568-192c-0000fd8a8641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:48412/bin.sh","pattern":"[url:value = 'http://210.208.111.26:48412/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d61dfe5-d5c8-417e-2bbd-0000674adf66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/i","pattern":"[url:value = 'http://144.48.123.149:50607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2484efb9-df42-a2a6-5d35-00000dca280f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/bin.sh","pattern":"[url:value = 'http://31.173.12.38:48285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab5a5e2-2e8f-ff94-ebb3-0000366b4e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/bin.sh","pattern":"[url:value = 'http://27.207.139.137:59758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c543583a-4cce-c6e6-6dca-0000403de25b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/i","pattern":"[url:value = 'http://159.255.7.120:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fb8a8-6504-7d93-3fd3-0000f4d521eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:58204/bin.sh","pattern":"[url:value = 'http://27.206.197.243:58204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f280d46-f223-5b65-bd08-0000007a62e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://190.109.228.177:37896/i","pattern":"[url:value = 'http://190.109.228.177:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9298b1-ad5d-8686-3c3f-0000977323df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/i","pattern":"[url:value = 'http://42.225.206.253:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd702ff-357d-ea28-b23f-0000606f544b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/i","pattern":"[url:value = 'http://219.155.193.230:59136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed10f80-27a5-a6fa-fdd3-0000630fa08d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/bin.sh","pattern":"[url:value = 'http://119.179.214.25:37703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac17854-2f92-f69b-0964-00009446c220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.132.158:59339/i","pattern":"[url:value = 'http://115.48.132.158:59339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4f99e6-d5be-e617-dee4-00001ff984a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/i","pattern":"[url:value = 'http://115.57.199.157:51293/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfe7d40-be70-065e-54cf-000044781063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/i","pattern":"[url:value = 'http://182.117.9.81:37641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff368be-2783-ef8b-175a-0000b226d452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/i","pattern":"[url:value = 'http://216.249.4.20:36657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67ccad3-53d4-17b5-fe91-0000131fcca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/bin.sh","pattern":"[url:value = 'http://123.12.225.205:41540/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed1b394-6dcb-7b6c-5d4a-000030504a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.236.158:50588/bin.sh","pattern":"[url:value = 'http://119.179.236.158:50588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad69af17-610a-cec1-8985-0000f0ee892c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/bin.sh","pattern":"[url:value = 'http://123.14.54.13:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b92de8-236b-b166-caf8-0000c11095f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/bin.sh","pattern":"[url:value = 'http://125.110.46.203:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--815c508a-1b78-045a-e97b-0000c0b29bf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/i","pattern":"[url:value = 'http://61.53.92.34:34684/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--025b1293-4d22-839a-75b3-00008f6ebbaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.212.236:37136/i","pattern":"[url:value = 'http://182.113.212.236:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbb3c34-aeef-0e68-df0d-0000f8541be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/i","pattern":"[url:value = 'http://182.116.70.209:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ec639b-75a0-79ff-8458-0000e25c841e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/i","pattern":"[url:value = 'http://210.208.110.4:37718/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--969296fb-96db-063a-6d09-000074fd06fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/i","pattern":"[url:value = 'http://221.15.4.237:59213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845e1b1b-b270-e1aa-034b-0000c1e0bed2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/bin.sh","pattern":"[url:value = 'http://123.10.238.107:36973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e17954-e85c-1ffb-0ff0-0000b633d3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.41.232:60566/i","pattern":"[url:value = 'http://42.235.41.232:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3070d3-49f5-ecd8-4a77-0000725f8703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/bin.sh","pattern":"[url:value = 'http://210.208.110.4:37718/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d483b45-ea44-57b1-02ce-0000c6922c02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.38.151:38535/i","pattern":"[url:value = 'http://115.59.38.151:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bfa2b2-cc1a-11c5-afb3-0000f5431f07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.96.94:38510/i","pattern":"[url:value = 'http://123.9.96.94:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2c0c2a-c93b-5bd0-9f72-00005fc1a53b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.68.42:46437/i","pattern":"[url:value = 'http://123.11.68.42:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914b72e1-1996-2657-047f-0000a0517cc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/i","pattern":"[url:value = 'http://125.26.202.172:59746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dbd2c0b-4b1b-f9ad-f7b7-000074c20ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/i","pattern":"[url:value = 'http://182.119.183.1:55955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c84e6e09-af30-f9c8-6d57-000091bd5457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/i","pattern":"[url:value = 'http://222.134.172.2:44618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56719105-e974-85a4-6364-0000bde57de2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.70:45805/i","pattern":"[url:value = 'http://110.37.89.70:45805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a4c85b-bb44-a5dd-0df5-00004607be29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.212.105:46118/i","pattern":"[url:value = 'http://125.46.212.105:46118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9207db1f-9bad-38e4-1501-00001fa42806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.168.124:55125/i","pattern":"[url:value = 'http://115.56.168.124:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17dfa324-a6bf-0d2c-75e5-000058748bea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.16.143:54649/i","pattern":"[url:value = 'http://110.36.16.143:54649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df2f8925-b27e-dad8-07b8-00008b60df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/bin.sh","pattern":"[url:value = 'http://219.155.193.230:59136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3e328-c674-25c1-ed9a-000093cf519e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/bin.sh","pattern":"[url:value = 'http://61.53.92.34:34684/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8ce6ac-27f9-d44e-b97b-0000c83e7a51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.166.115.199:56157/bin.sh","pattern":"[url:value = 'http://175.166.115.199:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a7d93d-53df-571b-b2da-0000c08d7b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.104.0:41525/i","pattern":"[url:value = 'http://110.37.104.0:41525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a07390e-3be4-644f-ab12-00006e087087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/bin.sh","pattern":"[url:value = 'http://156.146.24.110:51345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed72f272-df14-2e1e-8f45-00003b826a52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.50.100:43521/bin.sh","pattern":"[url:value = 'http://42.237.50.100:43521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edda8851-e510-5592-9440-00000c54284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://200.115.102.2:57794/i","pattern":"[url:value = 'http://200.115.102.2:57794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69e73ca-a1a0-a703-d2a2-00007bebc298","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.97.247:34050/i","pattern":"[url:value = 'http://115.63.97.247:34050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d059e9-699e-b686-6f22-0000bfef9a9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.44.180:33342/i","pattern":"[url:value = 'http://42.227.44.180:33342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f118439-e86c-1674-0c77-0000ea93e603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/i","pattern":"[url:value = 'http://125.47.244.3:55442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d553f7d1-30f1-1ba5-7261-0000d1a26d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.255.227:42646/i","pattern":"[url:value = 'http://110.39.255.227:42646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b209c8-b037-e905-76d8-00009f67ebaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/i","pattern":"[url:value = 'http://42.230.47.176:47866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c2251f-7fdb-05f2-ae9b-00007e95d2c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/i","pattern":"[url:value = 'http://109.236.44.113:59714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18fc7b1-16e7-1b61-0035-0000c9560e00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/i","pattern":"[url:value = 'http://219.157.212.157:59656/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c38611-a209-49db-8811-0000862620dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/bin.sh","pattern":"[url:value = 'http://182.117.9.81:37641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5164455d-17a8-498e-ed11-000057c3e61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.219.168:39833/i","pattern":"[url:value = 'http://123.14.219.168:39833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d74fe0b-27d8-efbe-fe4e-00002574d334","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.58:39112/i","pattern":"[url:value = 'http://110.36.25.58:39112/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc97d97-53be-b773-2ac2-00007403968b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/i","pattern":"[url:value = 'http://123.173.86.99:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cadea4f-5bc9-6887-cec8-000083464b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/bin.sh","pattern":"[url:value = 'http://123.12.79.182:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa365450-0121-68ee-68e4-000089a7667d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/i","pattern":"[url:value = 'http://105.184.49.165:53813/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--967a51f3-2eb3-f63a-ed38-000050847c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/i","pattern":"[url:value = 'http://42.53.22.56:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7906b6a2-8f61-0afe-c181-0000757660d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/bin.sh","pattern":"[url:value = 'http://113.228.117.193:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ceb837-d5a8-da86-59b1-000085927d28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/bin.sh","pattern":"[url:value = 'http://42.53.22.56:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1802fa-7f34-af4e-46ad-00006d7f4900","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.236.62:50658/i","pattern":"[url:value = 'http://123.12.236.62:50658/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0ddee67-536c-5092-59f4-00008171e8b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/i","pattern":"[url:value = 'http://182.116.119.29:53082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28d1e2b-a503-ffbc-a0b8-000087262c3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/bin.sh","pattern":"[url:value = 'http://167.250.158.32:40802/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f902b-36e0-ebf6-797c-00001afe5baf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/i","pattern":"[url:value = 'http://42.55.212.26:51890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56816565-f9e6-65f4-8104-0000385f6067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/bin.sh","pattern":"[url:value = 'http://125.26.202.172:59746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6318f4dd-d539-3489-8120-0000129b5f41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/bin.sh","pattern":"[url:value = 'http://182.112.39.204:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb41100-3676-95bb-8424-00006ba311b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/i","pattern":"[url:value = 'http://119.179.214.25:37703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f67cc1e-fa07-7f56-bdb4-00005657a7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/i","pattern":"[url:value = 'http://123.10.238.107:36973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d556948-849d-ba7e-de89-000025c1ec3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.62.66:34836/i","pattern":"[url:value = 'http://219.157.62.66:34836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbcd13-b300-807c-bd32-00008543fa42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/bin.sh","pattern":"[url:value = 'http://125.44.219.185:54557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc63296-1ad9-d916-5d5b-0000929fb2d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/i","pattern":"[url:value = 'http://123.170.100.105:42942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0485c44-21d7-a7c6-41ad-0000edecbbe8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.81.19:46242/i","pattern":"[url:value = 'http://27.206.81.19:46242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e677e667-53e2-de0a-4352-00007fab2818","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/i","pattern":"[url:value = 'http://110.37.58.92:44731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bcd61d6-1ef4-f58c-2e86-0000e441e8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/i","pattern":"[url:value = 'http://123.12.225.205:41540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c7a7c4-eb71-be07-98a9-00008696068b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/bin.sh","pattern":"[url:value = 'http://210.208.104.156:36904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bade5c0-c98c-254c-b3e0-0000eeb70b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/i","pattern":"[url:value = 'http://123.5.186.20:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0feff27-9d62-042e-eafd-000000553762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.140.248/init.sh","pattern":"[url:value = 'http://181.214.140.248/init.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2414b03-95d2-f62a-c42c-0000e4661ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/bin.sh","pattern":"[url:value = 'http://109.236.44.113:59714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67266c3c-f8ce-0952-1065-0000c242f86b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/i","pattern":"[url:value = 'http://115.197.132.72:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d27dc67f-302d-659c-cbe9-000018cf1758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:53074/i","pattern":"[url:value = 'http://196.189.35.172:53074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab0afea-c89a-d035-9145-0000b2fd0398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/bin.sh","pattern":"[url:value = 'http://182.116.119.29:53082/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19fcdc67-472e-6e22-d11a-00002068ac36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/bin.sh","pattern":"[url:value = 'http://42.179.152.19:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db877bde-133b-07cf-ac27-0000cc76ebf1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/i","pattern":"[url:value = 'http://125.44.219.185:54557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d63ffde-2e60-9785-8c6b-000034fe9009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/bin.sh","pattern":"[url:value = 'http://115.61.120.117:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86079bd7-e239-f475-cc76-00007061a0ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/bin.sh","pattern":"[url:value = 'http://115.58.171.191:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0542f0a0-80c5-5a78-44a3-0000a160d9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/bin.sh","pattern":"[url:value = 'http://117.26.227.227:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a296e389-1364-6bec-445a-000076adf35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.33.96:58607/i","pattern":"[url:value = 'http://182.119.33.96:58607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc3840a-903a-d5b5-54c0-0000a4630e71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.201.94:60468/bin.sh","pattern":"[url:value = 'http://175.148.201.94:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d988d79-866e-a80d-f5c6-0000dfafeb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.29.63:58773/i","pattern":"[url:value = 'http://42.230.29.63:58773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e14d8e8-1510-adb4-36a6-000000bc5f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.165:52379/i","pattern":"[url:value = 'http://123.5.124.165:52379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321c5a4c-4389-4b0d-6860-0000d9a3d8a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:42743/i","pattern":"[url:value = 'http://210.208.110.42:42743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88fdf1dc-afd5-1d07-e313-0000be4ed72f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/i","pattern":"[url:value = 'http://42.237.60.215:54523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc0283c-92bd-b179-48ac-00001f3e35fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.182.143:33305/i","pattern":"[url:value = 'http://115.54.182.143:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9953d88f-b200-8e59-b6c0-0000a59c56d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/i","pattern":"[url:value = 'http://125.110.46.203:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8d5a451-4142-1058-f467-0000a5da5e77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/bin.sh","pattern":"[url:value = 'http://221.15.4.237:59213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e9ed31-1b36-54de-c1af-0000e3d91de1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/i","pattern":"[url:value = 'http://210.208.104.156:36904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd37fe54-f166-05a7-cdaa-0000ad41aa23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/bin.sh","pattern":"[url:value = 'http://123.5.186.20:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5528690b-a66e-e5fe-64c4-000079a9d20e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/i","pattern":"[url:value = 'http://182.122.195.212:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ff516-f490-8984-73b0-000015a9928d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.32.46:45304/i","pattern":"[url:value = 'http://42.230.32.46:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a98a6a4-adf3-4726-9961-00002c8eb071","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/i","pattern":"[url:value = 'http://123.11.10.99:56358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458fc1c9-65f0-4680-34f3-0000c5ee909a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.171.67.100:36364/i","pattern":"[url:value = 'http://109.171.67.100:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee4a018-45ac-7ba3-0a18-0000ef232d70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/bin.sh","pattern":"[url:value = 'http://105.184.49.165:53813/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bfe99b-cea4-6fa5-2cc7-0000d152f466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/bin.sh","pattern":"[url:value = 'http://123.173.86.99:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71d9994-b1cf-b3ca-9197-0000cde908ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://171.83.59.154:46798/Mozi.m","pattern":"[url:value = 'http://171.83.59.154:46798/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394c1527-44d4-bca6-54a9-000081abfe5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.183.101:34303/i","pattern":"[url:value = 'http://182.115.183.101:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d836aeb3-15b8-e458-3e2d-0000cc5001c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/i","pattern":"[url:value = 'http://117.26.227.227:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37096f1-165f-752b-a051-0000376e004a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.14.94:37078/i","pattern":"[url:value = 'http://42.224.14.94:37078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--062eae7b-67b1-2594-ad97-000040805eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.128.149:36887/i","pattern":"[url:value = 'http://124.234.128.149:36887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b2c69-838b-bb4e-8f94-0000f02b84b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/bin.sh","pattern":"[url:value = 'http://42.55.138.2:60455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8e452f-8b2b-dd69-4138-0000406951a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.97.33:40194/bin.sh","pattern":"[url:value = 'http://112.239.97.33:40194/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64cc3a8-8f38-4ac6-4904-0000bca0c0e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.135.245:34017/i","pattern":"[url:value = 'http://120.28.135.245:34017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e030cf-de48-b166-6531-000011c94009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/i","pattern":"[url:value = 'http://123.5.83.209:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e36f456-ffe9-5989-05c0-0000232da6a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1","pattern":"[url:value = 'https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1085830-6cbb-0926-b172-0000aca4ffe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.171.177.193:32861/i","pattern":"[url:value = 'http://45.171.177.193:32861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94fb391b-dc8e-a3d0-fbec-0000c0eeaf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/bin.sh","pattern":"[url:value = 'http://223.105.50.190:53132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba824e4b-8d37-6a84-0541-0000e5f5a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/bin.sh","pattern":"[url:value = 'http://222.142.210.206:51525/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--935a2c9f-cb99-6a01-13a7-0000b0b669b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b548ba06-3155-45e8-9036-000096d6b639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.link/ksmd","pattern":"[url:value = 'https://kworker.eth.link/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc96cf5-ef1c-752c-7e43-00006c89aa57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.179.119.120/install.sh","pattern":"[url:value = 'http://167.179.119.120/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831bfbc8-aa0c-4676-d1d5-000016e7734f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd","pattern":"[url:value = 'https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b325dec-4832-a636-b65d-0000934c1e78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.98.10.60:55555/ksmd","pattern":"[url:value = 'http://216.98.10.60:55555/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f31e28d-9574-59c6-4900-0000200d5c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.limo/ksmd","pattern":"[url:value = 'https://kworker.eth.limo/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ce0ead-78c4-9b7b-87a9-0000c7894910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd","pattern":"[url:value = 'http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0c8e26-479e-5a34-7fef-0000640086ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/i","pattern":"[url:value = 'http://223.105.50.190:53132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231549e8-760f-9720-497b-00001fe1d432","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/bin.sh","pattern":"[url:value = 'http://182.126.247.153:53090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f169c919-7181-cdc1-0cbc-0000c9d7685b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/i","pattern":"[url:value = 'http://222.142.210.206:51525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6422b708-9a58-9982-e27e-000084816de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/i","pattern":"[url:value = 'http://115.55.197.125:40668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5856f40-ca38-19de-db84-0000fb5bc85c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/i","pattern":"[url:value = 'http://182.126.247.153:53090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b10113-4911-3b8f-2401-00004f6beaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/bin.sh","pattern":"[url:value = 'http://123.12.225.188:60928/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--110e4f68-18fe-557e-d6c8-000022eba1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/bin.sh","pattern":"[url:value = 'http://105.184.45.242:43025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c5a577-cd6a-a2d6-a927-00009db645a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/i","pattern":"[url:value = 'http://105.184.45.242:43025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2fc819d-6e02-b522-c2bb-0000972e79c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/i","pattern":"[url:value = 'http://123.12.225.188:60928/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a47d2b2-2958-1943-f30d-0000691a1c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f1ef94-3efe-c966-a7a3-00001d30784a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a730777-876f-79c2-1f1d-000023858d10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/gpon","pattern":"[url:value = 'http://94.154.43.104/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf38292-f4da-3bc9-1911-000027e070f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4beb7ff-2eef-a593-7efa-0000cdb3d743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b98769-e692-511a-c389-0000750fb026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dad95e6-4082-fdf2-770a-0000fd4848bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.104/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d850ba92-6a61-1ae6-5d0a-00007fa03e2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cb8f81-fa09-7741-de88-0000a42cab85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.104/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab0d6d3-56fb-bcf7-f31a-000067ba1fc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d48c92-0efa-826e-e48e-00001c69e8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.104/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735ce3f3-0c3a-b6c3-8513-0000547a35a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--416a8171-9cf2-b80b-df02-00002eba66c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c6ad43-555f-188a-e0bf-0000ef04d336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95146b8a-6998-3523-eba8-00008407bd7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c1175f-494f-87f6-a764-00007a765a34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.104/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20572975-4a65-1776-2222-00001705b489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mips","pattern":"[url:value = 'http://94.154.43.104/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6568de07-ce6f-26dc-5f64-0000adeb52b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d0f300-1f58-958c-652d-00004d342586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0258c5-1616-c3d2-f81e-0000ff7ea7d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c3a7bd-b54b-e1ef-e710-0000dadb913f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i686","pattern":"[url:value = 'http://94.154.43.104/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36337b13-d50f-63f5-957e-0000990d999a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client","pattern":"[url:value = 'http://94.154.43.104/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48519e4-19c2-26f8-4897-00005c4fe391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i586","pattern":"[url:value = 'http://94.154.43.104/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cea9995-4885-52e8-4a55-0000eff205ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d6f7e5-edee-9618-7c4a-00006f12578b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7b1da3-8dcb-b79c-962b-000017f36253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.104/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4302595c-8f5c-090d-91d8-000014a71508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b0690b-4726-6fda-b375-0000877dc9ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f39746-65d7-75c5-8022-00009ad50b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5871b030-8672-f945-0350-000013da4f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f652238b-1240-26cc-1989-000022daf680","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9409f0c4-b073-c65c-29b5-00000fb022bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d75efc2-ade0-e370-fb8c-00009fd46d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c56941-e26b-dca5-b5e0-0000da1f4470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad58ce-a13f-dc16-48b8-0000b542f645","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cc38fb-371c-a7cd-5a8c-0000c8aaeb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a8b81c-87b3-782f-88cc-0000155b1066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2952994e-943e-248f-0a57-0000ab94e4c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14279c19-1b92-adc8-b079-00009f7fad38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d317d826-d585-ba6b-2657-00000284b5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0ce967-4b65-7e0a-5e1c-00003fe49c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121baa4-18bf-52ea-1fa1-00007844e69f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9f2607-6bcb-cc3a-6c90-000052575e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83a8be5-6989-c671-95d7-00004524cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a34877-f0bd-f803-72ff-0000d2b70c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999b8515-487e-e63f-9e58-0000cfb2026e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab46aef-92cb-22a7-8233-000005d626f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client","pattern":"[url:value = 'http://silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--501a1008-1370-b624-f8a2-00004dc5ff6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9328effd-d338-f157-e9bd-0000a539e267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fd9f72-976b-a109-96bf-000096d6e150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c7de0c-9000-807c-2e41-0000e7d70328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd80a9df-c2b1-d0d1-8af8-0000e0deb3de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15953c5b-fed4-0ec5-09ea-000067099ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b312d1-85b5-45af-b66b-000052a1888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5babfdac-4edf-5b87-0acb-0000c4020461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb086d-b35d-c417-497b-000070168cfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7761d418-cf2f-2cc1-afe0-000039a2e6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a38806-9823-5483-d81c-00004c7ed91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa39dd2-596a-4211-183b-0000f14ba2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1575c9-6312-5df7-4195-0000559d8176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ac9d09-3229-209d-33a8-0000e0286504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b142717-06f8-7f78-45ff-00002d009668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e1b56-ab1e-2319-a653-0000b9a2a026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b712f954-ff2c-e4e1-c91f-0000a904e8c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c410d6a0-8c70-b184-f993-0000e7db6af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd6b576-4c1a-6b60-bbe1-000052087c9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5487d4-c8f0-2a1c-a78e-00006632431c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2daa434a-866f-8cb5-382b-0000642c1ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a88a202-5786-3a89-5a8e-000088a044d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c11409-dbef-f94b-4eb2-0000396a5b52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf00c0c-c0f5-a43b-2c1f-0000ec640181","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454b155-026e-05d6-ba4b-00000fd9a335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1479d417-f8b8-f5ef-6bdf-0000219239cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6186779c-eff7-5186-d530-000064dacd7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb865-c305-c173-92d4-0000d1c4a7ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb03eb39-0fe9-1115-5bca-0000fb4fe0c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6704cab-c69f-a2b7-dd86-00002d9286dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264fb695-defd-e4e7-699a-00005b526aac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d6a0a2-4cb7-86cc-56fc-0000ef3d0729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a2e76e-f11c-35c9-62cd-00009fd80482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8aad0cc-d404-b7ec-0359-0000dbf8a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a53f41-2e58-2a4e-4abd-00007b4cdf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f95db6-fad7-0f90-1cc6-0000fed1ae6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf00539-cabd-c932-5ab0-00001f069d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4962d3a-8222-df92-ed06-0000e4cc49c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d62e556-b804-452a-e103-00001cf2107c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9455560-6a73-436a-621e-00007ddb9269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd1dba8-7113-79f6-c5c7-0000b005b7df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fdef7e-001d-53d8-9eb8-0000b0f36105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c861ac-7f05-b814-84b5-0000cd4df1ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5fe6d20-c2b1-c761-88bd-0000466dc90a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a4fa06-5666-f65d-d8df-0000cf1357f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f9bb2ab-a405-b0fa-dbcc-0000907571c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d72946-ad14-1fae-e04e-0000dc906cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651fa3e6-3d00-bdd5-2aec-0000513b0b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda603e9-e4a2-433b-d98c-000046ddfb22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ca3b1c-0187-f7fb-af13-0000a649db18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4c44bd-6461-5457-9a3c-0000d28faf8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f59120d-b19e-9c6b-9174-000096ed4fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4f62f7-31db-5204-abb9-0000f55575f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65accc9b-2776-96e5-1a14-0000bd1f655b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e01642-1d75-0d4d-8658-00003bfa4b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2c8509-43f1-b66f-491e-00008f8b7ef3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4a8d24-d976-e2a9-39b7-0000d316e581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.172.218.181:39713/bin.sh","pattern":"[url:value = 'http://45.172.218.181:39713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119e49c7-35e2-b3ad-3565-0000569a8f75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d3d1b1-f115-f5f1-2755-0000b713a61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9300db62-610b-da21-f1ef-0000dde946a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603ad34d-6a04-a9ff-c6e9-0000e02d1433","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b26f3d9-3a99-2f8e-5647-00009bb27c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df3243-436f-e464-6341-00007db6ed60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b244d1-c5a1-92f4-3d1c-0000c9474269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5cc92a-2b19-025b-ba3d-0000b949f70d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4161b5ce-dd80-691f-9e2e-0000cc40f596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ce0158-96d6-d72e-0950-0000f31ee467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43270b97-c38e-3e7e-881b-00004ad48738","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ecc116-dac0-20b9-66d4-00009780d2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f2956f-ea02-d8f9-d4ad-0000e87824b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f63a9-1318-2378-4ca3-0000da693623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46203eaa-afa7-2efb-472e-00005a32a6eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1254f1a-3b2d-9610-37ff-0000d922e444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5404da31-2e9b-1aa7-3dde-0000ad6523d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8fa79-f380-7f13-579f-00009908347a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3dc71b-c1a7-f776-848d-000038d60428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e790075-4dcc-da7e-e203-00008f952693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7713577f-9a63-5109-c28f-0000da9fe0f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46c7d55-5365-1485-6af9-0000409483e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3f58a2-274a-2f99-76db-0000ea8e360f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384810c-9a88-43ed-ad01-00003521526a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16266d3-ab3b-340e-e4b5-0000eba20253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09599b0-d351-08ca-7947-000011ceede6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573394cf-8913-ef4a-c260-0000c478ba8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d09419-9e58-c19d-bf11-0000747f409c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1673941f-80c7-56f3-8941-00003f2dce6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccac274b-125f-3eb3-7782-00008d1c7ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.32:52224/i","pattern":"[url:value = 'http://110.37.39.32:52224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36b4dc3-a5a1-1114-9f61-0000f828e48c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c191b6-f476-57fa-ff38-0000b19c8eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a187d9b7-797e-3028-4e89-00001741c54f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69614fd6-78d1-37ba-72a1-000030260e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fc9bb0-5df5-0d03-554f-00001796561f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79ad6547-a3cf-3d12-908d-0000314e9e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--332fb43c-f84a-f7b5-1dcf-0000f27f0f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58dc9cbe-8698-c521-1771-00006927cd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b18661-52de-78cc-4dfa-00006cdc58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458121cf-50f7-bdc4-f71d-000078a532c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e315df59-7c42-bdeb-23ff-0000fc666d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9fea74-f5f8-0012-4d20-000063af10ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8214e19c-5e93-682b-1333-00005dc01268","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e00396-0125-a241-e12a-000086cf30a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d76b1b-dbfa-284f-632f-00007abbfc51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client","pattern":"[url:value = 'http://windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7e675e-8a9e-b8f3-f8ae-00000f55e705","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d9486a-ab9c-58dd-b92c-00007699a452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5607440-93cb-754b-7171-0000820d1571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19813ad-2819-aac6-f402-0000baedd1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6133a637-9c12-c426-2f03-000092dfcca3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d827c773-b297-2028-8357-00008370679d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd0af66-c325-968f-a752-0000176080c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a152d6-6e33-4cf5-a89c-0000542ea027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2030dd9-d088-58a6-9230-00005a896444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db7972f-1a6c-27a0-327d-0000ac627efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd80e85-bd8f-25e1-468b-00000503ebd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3291981-edfc-ff92-1391-0000cd3305de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a34c61e-2c47-7364-738c-00005eda4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1e591d-5eb6-1bb3-29e5-000071feae58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99fb189-cae6-c075-d7d7-000087fc7454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00de78fc-aed5-a751-da0e-0000ce25c337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932ff75f-b062-7c07-b187-000063ba6693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4440a4a1-a8d9-4c66-785a-0000907b4ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3bd0384-2876-8c03-13c2-00008cb76ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16011778-edc4-85de-ba70-0000dc10c850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87a263f-03c4-5b2b-d6fd-0000a84ffced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f967885d-59bc-d922-eca7-0000b09e1e0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c0198e-c4e1-5390-64c9-00001fb9181c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7983e1bf-ab87-1d81-3193-000009a0eccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57e3d52-cd48-48b8-cc46-0000461bab40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b8617c-8a3f-ff5a-3c26-000010c1b5cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2d23ae-8a2d-8414-4c75-0000dce61e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c764c439-d7ab-8c17-2a2b-00003a852c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff057521-735a-d422-3b14-0000efdb10ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c562bc-56af-7808-1f19-000084f77d09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f22c635-686f-e6ed-58d2-00009e165366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcc3b01-80a5-472e-d4b3-00005bd44e21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b37dfc-8528-1ffb-b22d-000080512ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11995dd-3482-f421-4535-0000197a35f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f161177e-1a8c-f71a-fe43-0000952fd55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0bf05a-e2df-7870-2734-00001633d617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91681578-0370-bb27-0aa6-0000da4873a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ceb29-2b27-195c-f884-000027d32f70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08bb9c8-bb02-d4d7-120e-000024a7cdbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c5b00b-464c-4d1b-0406-0000f7e8323c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7535dc1e-614e-2f88-95a3-000099f08591","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7195ca-db93-c31e-9bb9-0000437a69f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a65b41-39b2-af34-3ded-0000e3d4203e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537cdcf0-a697-3e79-df4a-0000358c8129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823f4d76-e57d-21ad-855f-000057bb4dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19780ad2-bf41-3e85-0b70-0000de4ab56d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b802a49c-e215-de46-2c27-0000241a1c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d652cef-0d6c-b538-8f25-000052212c07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1536100-85b2-57eb-9383-00007af21fe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8d6600-9c1f-475c-3133-000054d876fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cbd6a00-1346-319c-a76a-0000deb4098e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355453b6-e95d-3c60-9933-0000c8355c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1128c10-b4e2-cccf-4dc4-00008cdf4000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8ae020-840b-09b8-3376-00009f289ae1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dff707f-7733-f1db-30ee-0000a9e6fc85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104d41b1-3b22-49ee-1f5f-0000d1e592f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3114dde-54a8-ce46-64a6-00005c064ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310e2dae-dc11-dad4-b82a-0000e002421d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a91b165-8625-d2cc-350f-0000c0bc7064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf59f822-a31e-3cd8-b9bb-0000016d550a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/bin.sh","pattern":"[url:value = 'http://110.38.210.180:55714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b64d1ed-4b16-4f25-9cf8-000087b057c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--179039c3-d53f-cdc6-ee72-00009914735e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163496a1-3692-878f-c8a8-00002a63abc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce016727-793f-1c58-a710-000094cfd8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b10870-defa-14c3-6f26-0000d438249a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--605be62d-5796-6906-5cc9-0000307e4c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9a3aa6c-bd1f-fbc9-7d19-0000ae8cd102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af8149d-a693-2c7c-4d72-00009c75c36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b1461e-2d2f-4c20-4a53-0000f88ba06a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459455aa-3050-5653-32f8-000010376311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c34839-50b1-0386-cf19-0000e501cd1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f80149-7e85-33f9-f341-00002140b8d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b3855f-49bb-264a-7ba2-0000870aa28e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8b0882-6645-4671-23fc-0000a4745aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e6f69b-8222-f878-65ef-00000ebf13fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c776ce8-24fd-4e5c-a825-000054ae04ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36aaa117-106d-feca-aa74-00006c003733","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ecba558-ae58-b33c-5a7e-0000491f692c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35815191-e9ca-1c57-16be-000031b848ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ba77f-bce8-a9a4-62a2-00002d400a72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d996c74-4907-7515-7ece-0000e7158a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9146653b-416a-49b9-5378-00005b7d3409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e7007-10db-3574-5b80-0000c9b194b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cfdc7da-0f18-68dd-b235-000033df3a4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca07738-e150-c40d-a553-000068a6bd43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54bbc8b-2622-507d-1ac2-0000b068c8d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67cc5690-f6cd-170d-c5c9-000077568970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--440755b1-b62d-5f7c-6ee6-00006942ed7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62364be9-b42f-0cfe-ec1e-00008e72adb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db27d11-4c5e-224a-5cb5-0000566c59af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07623134-6e83-146e-2dfb-0000b2f50f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52be14e2-fb10-3522-f8e2-00005c6708ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2ae885-1337-c81d-452b-00005e942c9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22e5d79-704d-e7f7-570c-00007c953855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00997a42-34b4-37bc-fe15-0000db6ba69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2790dc4-5323-6be0-5440-0000fea7cc25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ec4823-415a-bc4f-49ea-00005f61d619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.152.6:41032/i","pattern":"[url:value = 'http://119.116.152.6:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35775fc-6356-674a-d2bd-0000efef863d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e483b19a-54f7-1d4e-7f02-00008d9d350f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eb23c3-88b4-0297-0ff2-0000eeee2194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c515b9-88aa-55bb-c855-0000e2425079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/locopoco","pattern":"[url:value = 'http://178.16.54.109/locopoco']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fe1597-6b77-4c33-7eaa-0000619ad231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efceaeb1-3227-b78f-1dd2-00007cb2afb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7c32e1-d4c7-db71-181b-0000e8959604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f960c521-14bf-7894-b662-000036c62bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7914b491-e8d6-9d30-629f-000092d428d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a52b5c-d987-d0ab-d971-0000411c3896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b2099e-aaef-4ea6-1839-0000f756b9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f7273b-48b4-15b7-c157-000025549a42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba7fa87-dc73-91e3-1b0c-0000b6ed771c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i686","pattern":"[url:value = 'http://94.154.43.117/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6b9fb2-2630-dfee-76a3-00001e1541c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e77d9d-9db0-1556-9782-0000a5421eff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a804cc6-1137-65c5-d4ed-0000d0202cef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f51c61f7-6d1a-f89d-c082-00002c1a26a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.117/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be313c9f-1899-293d-b4a9-00002014c318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.65.199:56561/i","pattern":"[url:value = 'http://219.157.65.199:56561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448b4c2b-07c3-80be-89b8-0000e6c8b64a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d33744f-560d-1143-9da8-00007b3352aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mips","pattern":"[url:value = 'http://94.154.43.117/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6ad138-c4f3-0abe-9b48-0000eb4a8d44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce524d6-9c75-610e-09a1-00005cfafb81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b726ca19-1695-f6cb-a556-0000049967df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68027e64-d6c1-6f2b-a8e7-0000e41a136e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--511f4099-5a1d-307d-066e-00007bc58470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.117/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aabf3ce-973b-aefa-018b-000011d236e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d29395-667a-6936-6418-00003d1f55d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10a2499-3d88-c399-2b59-00001789cec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f3c0c7-323f-e569-5f42-00008fd8b123","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10b841d5-2b47-4d4a-1fce-000053ecf79f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.117/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319857b7-b491-fad1-7808-00003f497def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2735bb54-b18c-6a1b-004d-0000ce4170b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dde5bb2-9778-db5b-711b-00000a8814a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.117/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4473f355-4116-d4b2-736a-0000689c3b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d9ae7c-19a7-3028-6c61-000066162fbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b328be-a705-14ca-f9f3-00003483dad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb595f4e-21b5-531a-aa16-0000a1e64d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b99452c-6345-4d78-cb4c-0000c1fc6af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f2da7-7192-47de-79d5-0000a3ba69be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0b05b9-27b6-58d9-9f00-0000d45cade2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e144de-a0ea-66a5-4e29-0000307905b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i586","pattern":"[url:value = 'http://94.154.43.117/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ac0e8f-343a-4dc9-5884-00005ffcdbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af803a59-3687-51c5-8c7e-00005f0a0d67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6960a25b-7c50-4bf1-b2da-0000451c3ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a891060d-120d-7cfb-3e59-00002dfcd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cd6b46-04a1-089d-db46-0000e3bdb85e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c87715-a9b1-cbda-46a9-00001b5a8151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf7f17c-349f-93be-d633-000087e36312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.117/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced34654-b202-864f-ffa3-0000263aa8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b571fa-a487-7850-ae8e-0000c10abc2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121ff32-eb03-599f-22ac-00000cd4999d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0223041-ca2e-4aab-26f8-00008f08d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--260b2f52-d789-ce10-47bb-00001e805eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177c2735-7587-0efd-465f-000055a0edb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc30a6a-5444-08b3-8ae3-000049b470d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267b733-d9bb-5ebd-9d76-0000aa09d261","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c32400c-dde3-efbc-71b3-0000c5c2a253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b520ac8-f015-dd3e-adb2-000014405a7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3faa800-527e-2d8d-62ae-0000cfc0688e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ca5bd0-2af4-7cc3-e9de-00005b01df3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f6f6ab-202b-5ca1-e38f-00003763e62b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client","pattern":"[url:value = 'http://94.154.43.117/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a341ce6-f071-aea3-f847-00009eda400e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841d78c6-210d-3ae0-cabe-0000e5b430ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/gpon","pattern":"[url:value = 'http://94.154.43.117/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6805912-9714-8187-bf7f-00006d15575b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549486b3-59ec-28d1-360e-0000a9d56d23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--decb494b-3ba2-26f5-8c77-0000a5b4c825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89604d80-bc49-c133-5416-00001d260eb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d442a26-1dad-d4e5-54ff-0000d66c36c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71194f25-f220-97e3-71f8-0000d97a3ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469f6721-9028-7d46-0ea5-000087f51a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3497cac2-6526-1681-3444-000039233e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/bin.sh","pattern":"[url:value = 'http://89.165.130.43:46337/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c67617-b380-ca0b-9be3-0000e67d49db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9fad7b-0124-e6dd-ef33-0000d7cb8e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/i","pattern":"[url:value = 'http://110.38.210.180:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d752ad2-c77a-3fc3-ad73-0000357fed76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/i","pattern":"[url:value = 'http://60.18.9.255:60894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8afd4d34-7373-f129-9e97-000051cfb781","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72cde8e9-0443-a0c4-0bbf-00002137691a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50270621-d7be-8eb6-8b3a-00003ea97bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/gpon","pattern":"[url:value = 'http://94.154.43.125/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d456033-6d84-0e65-01fa-0000b110c0b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587ca8c8-c4eb-5600-a706-000054a789f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client","pattern":"[url:value = 'http://coralwebqe.help/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3199e370-5c40-9a03-d50b-00005c07a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mipsel","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbf7356-15c3-37e6-8ce7-0000c38b9338","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i686","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8c2a35-6f22-9790-6ca7-00005db36109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/android.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae90360-5349-ae37-cf7d-00004e5a87db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cfff917-809e-9c57-9e7c-00000563453e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_x86_64","pattern":"[url:value = 'http://coralwebqe.help/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a58f2256-d2e4-663a-ae00-000046f2cf98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84164aa6-5493-2a68-fa53-0000d7c17626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/gpon","pattern":"[url:value = 'http://94.154.43.121/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f58bd-4f6f-d238-3c6c-0000adf1a32b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65bd53f0-b0c5-5b15-90af-000065f4f7bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6239640-0c4d-91c8-bd32-000001909426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a9a6e2-65c0-4cb1-7b23-000009474173","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8410a486-64a4-7857-0495-0000c6124b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/gpon","pattern":"[url:value = 'http://94.154.43.133/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca9b336-0393-3afc-d52f-0000b4723ac7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c7f404-c297-8568-273c-000086af9e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/micro.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eecbbd-acdf-a7ce-8b53-0000564ce9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b81437a-a491-61f3-7c3d-0000ecfb0713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29bd4624-b2a8-df3d-7cf5-0000d8c18c09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e480b3-2708-fa2f-7157-0000af8abbb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/gpon","pattern":"[url:value = 'http://94.154.43.110/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6750ad7d-da8f-1086-f6bd-0000d89d2d9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d91715-fec8-6954-1fa2-00001417ca34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/gpon","pattern":"[url:value = 'http://coralwebqe.help/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dac7e1d0-68a1-e5d5-66bb-00003b9ae5fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/chunk.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2b9f0f-8a38-e0ba-2947-0000a54f6d2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be911558-e2d7-1549-1c83-000026647fde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_powerpc","pattern":"[url:value = 'http://coralwebqe.help/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2607c948-ad48-3551-88dc-00000ea36054","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_m68k","pattern":"[url:value = 'http://coralwebqe.help/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8673ec-86b2-0ac2-e715-000054476076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5ef7e7-cc59-c772-2ba6-00008ff5887f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv7l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d56d10-fc61-2e73-05a6-0000cebad5bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf26bc68-54ec-b9da-921a-000028cfbbc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f25fa38-fe0c-a80f-c300-00007b592c99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff959c6-7dc4-79ed-cf85-0000ce4c0366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6445c6a6-d2b0-3fb3-99d3-0000b295a1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv6l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f689565-ea5e-f37a-18ca-0000f535db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv5l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4297cbf6-09f1-8b80-0f11-0000035a42ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496dd70e-0b52-f8fc-55ab-0000039226d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef9cd0f-c9f4-6beb-304a-0000451fe196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i586","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c529a1-0197-9bfe-fac7-00008384db1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa526f6-9a8e-fc40-e9b9-0000205d9e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_sh4","pattern":"[url:value = 'http://coralwebqe.help/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c4ff81-1658-d613-5b8e-00001baccff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5673a424-0b31-8060-6513-0000c855f2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv4l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc4ea55-9836-f3fa-d69a-0000a699b441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9831169e-ec29-7caa-786c-00004ebd6521","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb2b70-d360-d9f3-bae2-00008a44ba27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i686","pattern":"[url:value = 'http://94.154.43.133/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8668542-859c-c6d3-6145-0000654db49b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99595684-22f1-881d-88ed-0000ec1ce5e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a867f6b-7278-fd2b-861e-00001c8822d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ae0b9d-ae2a-e01a-a3a4-0000d3273991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.121/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b259fa-8c75-f36e-4130-000002338711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.121/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38767f3f-9f10-01c9-7173-0000ca80560b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05989fc-134a-78fb-9b2d-0000b05e05f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.46/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21705398-0c7c-f226-92e8-0000c6e5d36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8946d8f7-1231-e55e-9563-000092a38bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba91abf1-15e0-351f-ae2d-00008a8b9a03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.133/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2517ad-04b9-23e2-48da-00006b51db21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i686","pattern":"[url:value = 'http://94.154.43.125/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01df6c2-65da-65c4-2283-000047bd2d92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a748e06f-6f9e-4562-d8dc-00009184f35a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mips","pattern":"[url:value = 'http://94.154.43.129/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5d6c7a-d794-c3ea-279a-00007182a127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c508427c-0375-f1d8-bb30-0000650971ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf1bd96-dc26-55f5-a474-0000963993e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e987a5e5-27ed-b391-2a53-0000fbf30923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dc6ea7-d151-30d9-d347-00005c5ad6ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i686","pattern":"[url:value = 'http://94.154.43.129/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cb7ef2-c623-b6f7-7f36-0000ff3cad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i586","pattern":"[url:value = 'http://94.154.43.121/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81e7c1f-043b-072d-ba7d-00009a89aad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08b0718-bab6-4a27-d0a4-0000d3687bd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43407ebf-01a3-844d-8416-0000fd14e928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.100/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a1d353-7f7f-1f71-60dc-00009148d052","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5265b3-9415-4f88-df8b-0000ae81aac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv7l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347f3670-0197-1a83-7956-0000e921d012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv4l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9902ab05-7729-a312-3226-0000514083d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef36b43-8384-5161-e14d-000024176783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88d0e404-7144-12cd-29b9-00004fbe09c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be4150d-9858-3286-1169-00006c7c16c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i586","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c9bb4a-c79f-eea8-8933-00006cf2401f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1d7e2b-6fae-9313-2e78-000012d4d4f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mips","pattern":"[url:value = 'http://94.154.43.110/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c48370d-f8f5-1315-a74c-000014aebff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f389236-e0bc-8b37-8c54-0000bfe58cd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.129/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c768d877-74a7-52be-e192-0000af409dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2552a87-aa68-910f-1255-00006466211a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a2ab54-bc72-02ba-58f0-0000eae8646d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i686","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d28a0b-6a9e-f6dd-5517-0000519269af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6703fb9-7e87-315d-aca9-00003622dbf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010d78ee-7d12-8132-0cae-0000ce5d3746","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b30373e-37cf-1372-1c3c-00006c5d1df7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6b5d3-1994-48d3-a72d-0000ddbe9271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f38af1-a1d4-3320-8ee5-0000a5a88fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f135e785-852a-1258-2b09-000054043d3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce1d834-f356-5b65-489c-000049f895a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c46f99-99f8-5877-4d58-000078d8b716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4187c606-92b0-76bd-3e29-00001e875f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3f88e2-a46f-a283-0cb5-00001b2c7e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f45500cf-cda6-1e70-5f42-00007584315c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db108aa-20b0-9959-bf1c-000054269437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e03916e-f6c4-01f7-ba51-0000476c494b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.133/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eadedbd-2da9-f123-9927-00007a477a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f92ca9-6687-4738-b060-0000df8f0237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/chunk.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2107724-d96d-07b0-5ac9-0000b6fb5465","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.110/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb70ba75-7bf6-f1e4-3682-0000e863d8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb5591-2bba-d706-8ac7-0000c3dd253f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d973f1-b7ee-5138-934d-0000bb6d1cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebe4403-2cfc-69c1-ef8b-00004efcef23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.129/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f75e3c47-df11-94b8-821c-00007e83db10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.133/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b76968-c271-017c-427e-0000538829be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd935e0e-ca70-6d1f-f766-0000b3d6da3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280cd885-1d73-b382-2001-000053df9fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f63a9f4-7b53-5f61-76b6-0000edc5a98f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i586","pattern":"[url:value = 'http://94.154.43.125/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a8e494-418f-8870-4b38-0000ec734874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb19965-aa38-37b4-a130-0000a68ffe97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mips","pattern":"[url:value = 'http://94.154.43.125/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe73fee-3815-964c-1cbb-000031bae508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1fce746-48e3-26d9-9e4c-000025556f31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.110/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae4b7e0-995c-fb8c-cd05-000051778b1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775737a8-76c5-b42a-8948-000046152d62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cabb9772-1a99-9120-6530-0000c1b08f83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cec521-1719-3832-6bb6-000007a8a567","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30bff93a-bfcb-c895-ea05-0000432ad131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.46/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acb663b-1cb8-cbb0-40f8-0000e35998cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client","pattern":"[url:value = 'http://94.154.43.125/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd712dd-4bbd-4e71-d76a-00001164d474","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1fcf74-0e5c-15f6-6d9d-000066e443fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd819e4-d75b-683c-e85c-00004995ce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca720cad-f7e8-4c33-74a0-00003768d44b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client","pattern":"[url:value = 'http://94.154.43.121/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--971348ce-dc30-ca96-35f4-0000d3597aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cb7384-17a8-08f5-19bc-00001aeec747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/chunk.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65104c-26f0-16f9-6ca2-0000faecb6c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/gpon","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a2201-79e8-9446-3eef-0000d9b8d16c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/android.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4669096-bba1-bcf3-0a08-0000d878cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--064954f2-ed5c-15c3-d54b-000093e18372","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv6l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76648a33-305d-d18f-1120-000059e8cb91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94979ca0-7c02-3349-5862-00009e91dbab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6d4e12-4fdb-7075-4c9f-0000b62d4d81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba62c52-764d-9374-d852-00009dcad2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.125/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2bfd9e-7717-6a59-1504-00000e55b68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mips","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--973f6152-cc58-6731-da5d-000051cec83c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de4367-c275-314f-1b2c-000003d17b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ff86a1-8243-8477-d6fc-00006c17a2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6550e20-2848-2c1d-f210-000049b98b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9d8cc-5074-0e4b-3a19-0000e1432f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f8ec2c-fb80-e32b-3572-0000848c3c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90216fc0-c563-75b6-159d-0000cbd5b448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0194e63-5ada-b71b-0040-0000b476fa2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mips","pattern":"[url:value = 'http://94.154.43.121/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4cb6650-acc9-0126-9511-0000a7dbbcf3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/micro.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df4d2d23-cadc-016b-cfe7-0000e63ada0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--668dc0ab-eefe-188c-6e82-000079a8df9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i686","pattern":"[url:value = 'http://94.154.43.121/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f1f0d57-c98e-c44f-26b0-0000a5230eac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d214c38-6aea-f8d1-35d6-0000ceabe19c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451f2a2b-c210-f550-aefe-0000220d2d37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4e82f-d767-0b02-ef20-0000807b5aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mips","pattern":"[url:value = 'http://94.154.43.46/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0314afd-6fb2-74f3-22b0-000012220228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.110/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0cdece2-df27-8a78-0d55-0000490e437d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e34d1131-b609-1f3d-d6eb-00008a6bd4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9707c8d0-ef32-4086-fb39-0000e4b8b8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e76d8be-bf2b-8ac9-4ab6-0000cb310df4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i586","pattern":"[url:value = 'http://94.154.43.46/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe4e889-425e-14d7-0b40-00002b523acf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec7503a-5cd3-09f0-bf61-000062312ff1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mips","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f58c27-e4d2-deae-4e4f-00009395c4cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_powerpc","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f68c903-2989-bf0b-5657-0000af617ef5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--739ad0fe-c5df-82e4-77d3-0000dacea442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i586","pattern":"[url:value = 'http://94.154.43.129/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79dadb3-4b66-0294-df2d-0000a679284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.125/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e997c74-53a3-e4f0-c5b8-0000add79806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client","pattern":"[url:value = 'http://94.154.43.46/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4d695d-103c-43ea-ce1c-00002c401562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv4l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f7b196-8cdf-1912-6a5d-0000d3ef793d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.133/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c44668-57de-e4c0-88fa-000088983144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d2d562-ee35-e922-aa70-00002bb7d87a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c1bc59-b65e-78a5-ce84-0000330843cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a99b7c6-b834-ba0e-c3d5-00004303bcc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5019fe54-045a-3b8e-ad34-00007197a761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d507c94-9c81-0d41-f850-0000e68d32b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d3caa5-0280-8aad-f963-0000050a66e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.100/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7b0bdf-e038-06d7-8bb7-000056804602","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv6l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b973a1-6647-4f47-a1a3-00009a63531c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_sh4","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d1485e-7c73-dfd7-9823-00005b2061fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da98bd78-08e2-12a7-fe96-0000012bb71f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e34484-d4be-0dea-1ae3-0000bf5ccff3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.121/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adcab5d-452b-8d75-55c4-0000528403aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.100/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d17e9f-7045-2f10-6c08-000042510c31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_sh4","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee5e6612-1d7a-b06b-76d9-000054a0828c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58e1dbc-dcf3-1cbf-151e-0000cd5e8034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.110/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84465de-ac45-bbc7-6d65-00001a5a4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627549b6-10bb-5df9-4b59-00003471b691","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2975f507-b008-66fb-28e7-0000b89dc349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fd9529-d1c1-51f8-bd1a-00000cd0c889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i586","pattern":"[url:value = 'http://94.154.43.133/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9071dfc0-9865-db32-c572-0000447b4b04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client","pattern":"[url:value = 'http://94.154.43.129/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9ddbdd-db64-1bea-7647-00009d5510ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4465d3b-782f-c9b4-b50e-00004ce28897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ffd9c8-b884-c2d8-fd2f-00001632137f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24aa39eb-4d9c-5061-fdf7-00006946bd87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c12f1a3-6ae9-6e9a-dd69-0000d156076f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622fa5b8-3a2b-23b6-035d-0000479a9f91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mips","pattern":"[url:value = 'http://94.154.43.133/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d640731-b1f4-5864-4242-0000d441f9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv5l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5279645f-d6e0-e454-52f7-0000bbde4b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7024fc1-2a49-938f-c8d9-0000fdf48b98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--905de9b6-ad0f-50f5-e2ee-0000afc3a270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37215890-384b-b16d-2990-0000376e3a6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client","pattern":"[url:value = 'http://94.154.43.133/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c42c4c-0ae0-dc94-b392-000028ce5cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea906eb-f478-f5d6-6fe9-0000a891c63b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/gpon","pattern":"[url:value = 'http://94.154.43.46/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f556581c-3673-31e5-5b5c-000011203cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv5l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d0f570-eb5f-d21c-007e-00004f9feaf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca733ce-3e15-b708-dd6c-0000d39ead03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb5c2f0-6e9b-18a7-d6bc-00000375c42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf4a9b5-0532-ec1f-f964-0000f2f6480a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2dcee2-b4b3-caed-3648-00004eb6e72a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i586","pattern":"[url:value = 'http://94.154.43.100/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2b133eb-ecd0-1cc0-c7da-000019cc9c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87adfeba-968d-8dfd-dbc6-00001ee72d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c1346e-97d6-4434-c8d0-0000e176a2f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169c5b69-e5cb-6b64-76c2-00001386eee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--164b5d41-37a9-f43c-8011-00006b35194e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.125/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a44408b-3417-ba45-1b63-000098de7b39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91ad55a-1dad-827d-6e3d-000094702601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1560ab-c933-1312-0eee-0000297b78e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i586","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cf4eba-ec2e-ce2b-972d-0000599e83ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i586","pattern":"[url:value = 'http://94.154.43.110/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24b5f65e-d127-0513-86ce-00006bb94708","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5c575f9-7fbe-3962-d23f-0000f725b688","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8853def2-a650-dd3f-f3f9-0000afef0a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i686","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e906c783-e90c-5302-1a43-00007add0422","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4948a67-6c9c-adec-266b-00008fe0bf43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b2e1b4-277e-95a0-0c39-0000542b03f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48df2972-c410-45b4-2f8b-0000f129a976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c02dbb-624a-d740-a648-00008633cc83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.133/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8183dc1-2689-075f-983f-00001d9f69c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9707ddb-70b0-f32b-776e-0000bf3ee901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a176e11b-ee5b-81a3-69d5-00001a061f3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cd64b1-4367-383a-c127-0000d4aec1a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ba73b2-f2a7-99f3-79c5-00001d0a1f9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffc48d9-e394-6882-d066-0000fa853064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b75bf43-437c-f653-5a36-0000c5984168","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/gpon","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19a78ed-371a-f797-6670-0000a2708f58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.46/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b307ec77-cf21-6982-c44b-0000c967128b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb64d4b9-2a18-a06e-826e-000091722580","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.129/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ddb644-553e-f9bd-265f-0000c918c7c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53813e4-ee84-3eef-c83b-00001370c46b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.100/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f705d5e9-eb99-ff66-adfd-0000de606ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/gpon","pattern":"[url:value = 'http://94.154.43.129/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b2c6c8-e099-79cf-6959-0000d305206d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c87e9f-8150-c694-1d76-0000263aa45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de891e5-d32a-cf59-32e1-00009dd48669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe424bf0-d7ab-09e9-d8bb-0000caed80f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/gpon","pattern":"[url:value = 'http://94.154.43.100/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2659622a-c7aa-4032-b70e-000084d066cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40323b1b-c5e3-11a5-2ac8-00001060b7c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c688dcf9-be0d-6822-2e27-0000808d8c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.46/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa24b9-b923-f6dd-cc15-0000f9122b6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1e0fcd-f8fb-c21a-ac8e-00001096611d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c0376a-e259-add0-6669-0000ba556925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7603a9e-9bdf-2636-bf08-00006be06fb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv7l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952261bd-3bb9-74a2-1d23-00009076337a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6b70bb-9883-e0e2-7499-0000c8229584","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i686","pattern":"[url:value = 'http://94.154.43.100/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba72e09-1982-9131-56dc-0000b81241cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mipsel","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa1dbbb-444a-5e79-84ab-0000fe60db8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188751c-309d-8a63-4334-00005061995a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50903d0-5eb6-3b74-dce5-00002b0e9b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef855ee3-639f-8174-2ff9-0000e6382ccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.121/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f36259c-5dde-3535-728d-0000273641db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mips","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2664d8-c861-c6a2-790d-0000a4700a16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.100/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944a21a7-97bf-c015-c952-000032d7b3b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3066e7-dc52-22ce-f56a-00004da57f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i686","pattern":"[url:value = 'http://94.154.43.46/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc357ab5-12ba-cc12-4663-0000b4802cf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.121/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc123291-dad5-4d1b-91bd-0000166eb2ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ffdcba-fc8a-9f3d-f113-00003c305b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab5f91e-4ae1-d7a9-dcde-00009cbbd699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--146c3b8d-2dc3-7158-46d0-0000652d0f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6b0ef8-5dee-7534-6fe9-00000b42f247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c60277d-69fd-1d6b-840f-00003f286dbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9aeb4b-581d-6821-cc26-000025e977c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a89f0e3-9f0e-52aa-ad14-0000df0af144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i686","pattern":"[url:value = 'http://94.154.43.110/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a33bd06-d0f5-cc2c-5be1-00001e4088b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b50b8a9-944e-a350-942e-000065a8562e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f876a28-e06e-410c-9cc1-00002ee6c757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f68a1185-cd98-8552-97fb-00004d3cd51d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client","pattern":"[url:value = 'http://94.154.43.100/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d31a114a-639f-73f4-febc-000027c09701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_m68k","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22b9440-dff2-cea9-3181-00003d7d7ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa24ffd5-724a-6f79-4dae-0000d013ab7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cbe04ad-0f97-a5ba-9469-00006d63d04e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986aeb1f-6842-b722-5525-0000f3e1031a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273af84-bd3a-fd0e-1bca-0000f2d976c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd22037-b29a-edad-aa9f-0000280b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c9e423-18f2-7f6b-80e4-000016d7f1ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b8b34-b486-b1b5-05b2-0000d503f110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a168b5ba-32f5-47ad-849d-0000e6648d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.125/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12eb64ec-e44a-0ddb-e8e1-000062c7f92b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_m68k","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab07e0f-c41b-0146-7721-000085f7e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604c13ab-8efc-f51e-a24e-00003fdebb66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b85f0f3-fc0f-b07d-4ffe-0000ca9a1e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client","pattern":"[url:value = 'http://94.154.43.110/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--003ec575-8c0d-0abc-1446-0000d1a0d1b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8d5d9b-7c9d-ff1d-dd5f-0000992cce50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfc628a-cda8-d162-40ca-0000fb146c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.46/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e0fdd2-b01f-0391-6fa0-00007b63d98d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0495bac6-eb81-925a-fca2-0000ff1b8ea1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee2f1f7-4146-cae3-4795-0000075e73bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0eafdd-d691-b871-1dc4-0000bf006e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.125/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf9397d-4fc8-826d-1eb5-000062ba7983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/micro.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41e69cb-04fa-4aea-7e94-000027bcd166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bfffe73-2434-7778-6987-000005fcb032","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mips","pattern":"[url:value = 'http://94.154.43.100/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f2e20d-d71e-453d-6779-0000c355d434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_powerpc","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6ddb89-dcd2-bf20-7ee9-00004b5d647f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf2ab51-5af6-a90a-15fa-00008748f700","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140508c-03be-31c6-fc0a-0000d03ebbaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.129/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dabf2d0-8b4f-efdb-e25d-00001e7189cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db30a501-fcbb-bd35-565b-0000001d5742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725e8851-16fb-a64a-3365-0000e6816feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.129/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16165ced-a3a5-8c37-e969-0000b796a142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9241f5cb-ae1e-a359-84d4-0000019c5863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d250ad96-d1cd-9ea8-a2b5-00007d2a126e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a4ecb9-25c2-44a7-fb9e-00001d895bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/android.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9afd21-4a09-d67a-7080-00007c318c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.110/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a1694d-9d12-66d6-6e4e-000099da188a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d56315-68fc-fea6-52cf-000056f23ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e245013-8cca-0409-1938-00006caee18c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--939cf57d-27ef-5e09-8a6a-0000382d74a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.m68k","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc8db17-7c81-474a-c343-00001a6ca606","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm7","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a156224b-2567-0df5-4e29-0000ad0395cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.sh4","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b6f1d2-3c5b-5b32-f56d-000055de624c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.x86","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c6ba3b-b2b0-9240-8a60-0000b0656e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm5","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a620762-70e7-9a55-d891-000053d8cc39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mpsl","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--481ad30f-1445-049e-8cd1-0000a85d6d7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32dfee23-f41b-1a3f-7e0e-000018ecac02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e6822e-8ec1-7415-e8c8-0000867993d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d169c73b-2827-a12c-2dd5-00006c9dd77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb73fec-f485-5444-83dd-000059556027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53957124-4b7d-83ae-5abb-00007d7384bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mipsel","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd18f0f-5a52-c7ac-d7d8-0000b2e56489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--493de951-018f-5c75-ae8b-00004edc05d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcabab5-80ef-c393-0fd6-000052781414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb0c1ab-4fc3-9b99-0b6a-000038dba273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mips","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167570c1-7a7f-c017-1cbc-00006b4b458a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://mail.springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe5b275-5830-0e11-3908-0000a0df35b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a03c77-b369-90b6-4293-000000ede179","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6da30c2c-476b-0d40-f99e-0000264b4719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66ef7ad-b14b-6823-6f75-0000d421b01e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6427e45-27f7-80e3-72bd-0000ab497e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.spc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d404c01c-7790-59f8-5116-00002ddd0c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.ppc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab75022-2e2c-feaa-4d8a-00002001ac41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d0d4aa-fd1e-c34d-d98f-0000431e4f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.97/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0511dd87-5a27-4bfc-8776-00004e2ad30e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78f34b7-e3a5-74ac-c7cc-0000f24ac0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb65f925-1556-6fce-1762-000032560e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f67a617-6e3b-b80c-6d75-0000c6941ff0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6e46de-0c64-b07f-56f4-00007f48f954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed300733-8827-8218-1ba2-0000bbc3b8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1de399-22c2-745e-daaf-000010e10a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6388723-89fb-b361-c17a-000092bd0ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/ohshit.sh","pattern":"[url:value = 'http://94.154.43.97/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6bf99-54d9-8b3a-e047-00000a5903ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4485a165-5ef8-21a4-6f7b-000090a4b626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.97/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c488a4-d5f4-a18e-c60e-00004554a43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.spc","pattern":"[url:value = 'http://94.154.43.97/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08236fd-2c37-3634-f7d6-0000c3c0d694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.97/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08e8b03f-cf73-ee0d-7456-0000915523f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a995b3-b095-2ff9-d993-0000905260fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425783bb-97f1-35de-da78-0000d8dc5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb7666e-87a5-a530-d1f0-0000d09d49b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11382b5-5c60-b524-67de-0000bae8c293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6510a26a-6db0-6ba3-5f43-000030b0c532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/ohshit.sh","pattern":"[url:value = 'http://utensil.cleverpondky.com/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38120db9-2c2c-3425-31c7-000078ee8f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c31b4e-474e-ce74-7224-00002529bd44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a749cdf3-f86f-cd64-389c-000032a0d8b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd7b537a-a8e4-c105-d9fa-0000fb510eb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8796ce1b-42a6-a5b2-37e1-0000a810c509","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccfeb81-8e19-f2a8-5341-0000a2d0c163","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm6","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b7ff6c-d561-c101-a3ea-0000739aac74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/i","pattern":"[url:value = 'http://89.165.130.43:46337/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f8a3c9-e217-cc3c-f557-00005c447d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/bin.sh","pattern":"[url:value = 'http://119.177.244.151:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2615abbc-38c5-1112-04a1-0000181cc335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/i","pattern":"[url:value = 'http://119.177.244.151:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f2de20-8548-14a7-6b37-00008033788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291fd51f-6c98-d477-cc49-0000924b9d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9723c34-c38b-f8f1-0d68-00001aec61a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/id/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/id/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bfa3188-84e5-bc68-7fba-00008065137d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/i","pattern":"[url:value = 'http://42.55.138.2:60455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eba55d-b8cd-3ecb-ba0d-000074ba8ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/l","pattern":"[url:value = 'http://94.154.43.88/l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27cc319-b3de-7794-990e-00005ee56479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/arm7","pattern":"[url:value = 'http://94.154.43.88/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5301a540-0cd6-e3ef-df11-0000209bb007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/i","pattern":"[url:value = 'http://31.173.12.38:48285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8965f1c1-cb01-138b-940b-00005464fc7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/a.sh","pattern":"[url:value = 'http://94.154.43.244/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b027bc5-6781-3035-ad60-000041d7d04f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/m68k","pattern":"[url:value = 'http://94.154.43.244/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be675c9b-8beb-4291-f4ea-0000c0e8f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc440","pattern":"[url:value = 'http://94.154.43.244/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3fc7f82-1b61-d666-10ae-00000a6b518d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i586","pattern":"[url:value = 'http://94.154.43.244/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bdb0b4-171f-50cb-085b-00006734725c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/x86_64","pattern":"[url:value = 'http://94.154.43.244/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b17eec-1786-4721-1e23-00005954bb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm","pattern":"[url:value = 'http://94.154.43.244/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddbf82e-6f4c-f71c-47a6-00000bc14e30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc","pattern":"[url:value = 'http://94.154.43.244/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23e15b5-515b-72e3-fa08-0000c1378228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i486","pattern":"[url:value = 'http://94.154.43.244/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35655af-2600-3675-77ce-0000639602e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm7","pattern":"[url:value = 'http://94.154.43.244/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bac1db-fd34-01bf-1f64-00008cff2323","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i686","pattern":"[url:value = 'http://94.154.43.244/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4516539-aabf-ddc2-191a-0000db2a6585","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm6","pattern":"[url:value = 'http://94.154.43.244/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--236c394a-bf56-4a7e-c55e-0000c3fbed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/c.sh","pattern":"[url:value = 'http://94.154.43.244/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8891a79-0b11-3e2a-1486-00008b1fd7c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sh4","pattern":"[url:value = 'http://94.154.43.244/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172e4f13-ba07-5524-6744-000041210695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mips","pattern":"[url:value = 'http://94.154.43.244/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fc89da-730a-ac8f-f69d-00002a2268df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mpsl","pattern":"[url:value = 'http://94.154.43.244/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d583483-828b-96b8-59a6-0000c99fca6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm5","pattern":"[url:value = 'http://94.154.43.244/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92a3b41-964b-5e8f-3087-00006227845e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm6","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc8862c2-9a61-2360-d929-0000d2f5056b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/x86_64","pattern":"[url:value = 'http://oregano.brightleafrv.com/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94229183-1a44-57b8-f509-0000aa3f1a5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/m68k","pattern":"[url:value = 'http://load.dstat.top/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cdc95c4-0adc-227f-2fb3-0000e1839b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i586","pattern":"[url:value = 'http://load.dstat.top/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70236afb-a27d-9ba2-4f16-000070922bb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm5","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f6c54f-0aa4-ef44-159f-00006de3fb03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/sh4","pattern":"[url:value = 'http://load.dstat.top/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f40416-daad-7780-6e36-00003261692b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c76bfe9-c120-fc99-35fc-0000887ec8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm7","pattern":"[url:value = 'http://load.dstat.top/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9a2b9d-9e07-d172-3f73-00006717e930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i686","pattern":"[url:value = 'http://load.dstat.top/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b718f7f-14f5-6b8b-d19e-000030c2af96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm6","pattern":"[url:value = 'http://load.dstat.top/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e278dec5-9e11-0680-e862-000022770078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm5","pattern":"[url:value = 'http://load.dstat.top/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cc19fa3-af12-3751-e4f6-000035f2c2f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i686","pattern":"[url:value = 'http://oregano.brightleafrv.com/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e8721fa-386e-dd52-6006-0000b366b056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i586","pattern":"[url:value = 'http://oregano.brightleafrv.com/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff87d7a2-8c7d-5ba2-aef2-0000932f8904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mpsl","pattern":"[url:value = 'http://oregano.brightleafrv.com/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcc6083-3576-e04c-5dc5-0000e02a05b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/sh4","pattern":"[url:value = 'http://oregano.brightleafrv.com/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ddc639c-7eb8-c55d-aff9-0000c1caa2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mpsl","pattern":"[url:value = 'http://load.dstat.top/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80ea555-80e2-9193-9c38-0000aac9cc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mips","pattern":"[url:value = 'http://load.dstat.top/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41eafb9-b67a-683e-708a-0000ed691da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/a.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589b705e-9376-635a-a965-0000dab67576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc440","pattern":"[url:value = 'http://load.dstat.top/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a42718-1a17-1c22-12ff-0000ed3d62f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc","pattern":"[url:value = 'http://load.dstat.top/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5528eed-9925-2353-e883-000075298395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc440","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1efff3-89e7-9df3-a29f-00002adf483b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i486","pattern":"[url:value = 'http://load.dstat.top/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcea1da-0f26-a9f3-e57f-0000bfa89798","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm","pattern":"[url:value = 'http://load.dstat.top/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2d0bd7-2866-12ba-ecb4-0000da9be33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm7","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067925bd-244b-bf2e-ff1c-0000f8da3194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/m68k","pattern":"[url:value = 'http://oregano.brightleafrv.com/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a55116b-334c-b815-4ece-0000f82ce74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mips","pattern":"[url:value = 'http://oregano.brightleafrv.com/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f454bcd-60f5-d964-0374-0000783a63f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i486","pattern":"[url:value = 'http://oregano.brightleafrv.com/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51419c71-9f86-35bd-d9f7-00007d6af388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/x86_64","pattern":"[url:value = 'http://load.dstat.top/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9e82d4-f907-b64c-21ff-000060f49c46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46451b87-7754-48ec-5232-0000bf8c3668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/a.sh","pattern":"[url:value = 'http://load.dstat.top/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e176732-82e3-b1c4-443d-00007af60c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/c.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1392af96-3908-5156-eb84-00003a76d3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/bin.sh","pattern":"[url:value = 'http://42.224.169.34:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dde767f-9028-b58a-bdf0-0000b3d54b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.m68k","pattern":"[url:value = 'http://217.60.195.187/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73445db-984b-6ad1-b209-0000d910d03d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arc","pattern":"[url:value = 'http://217.60.195.187/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928d6883-749b-d7e2-b5c6-00002928fed7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm6","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa05047-75f0-094e-a879-0000edce20cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.spc","pattern":"[url:value = 'http://217.60.195.187/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4cd30c-be89-d363-3fba-000028132741","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/c.sh","pattern":"[url:value = 'http://load.dstat.top/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b554dfd0-ddf5-4bef-0a5c-000013593c16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb40c49-70b9-fdc3-c8d3-0000eb84cb95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.sh4","pattern":"[url:value = 'http://217.60.195.187/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e6ee1e-220e-d58e-b0b6-00006b5a5263","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.ppc","pattern":"[url:value = 'http://217.60.195.187/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508c68dc-328d-b19c-9160-000039cfa70e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f242a9-7632-a75f-854b-0000b3239dc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mips","pattern":"[url:value = 'http://217.60.195.187/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84208460-7fed-8e1f-b1ba-0000d820f38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mpsl","pattern":"[url:value = 'http://217.60.195.187/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14922831-a590-1a68-a3bb-0000928396df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba6230a-5643-e31f-fca0-000078fdb1bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7538f444-3f3e-b697-224a-0000db37fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b843939-26bb-7ad4-745f-00003b9d5139","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm5","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58a5815-527b-02eb-14a8-0000919499b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm7","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56323696-96fb-5fc4-d0c1-00004c23414f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--547488cf-0c2a-7bc6-3b3f-0000cab733e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc6065b-9e0e-0974-ce2d-0000b0c24470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c6b901-51d1-98f5-139d-0000b2b45d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa9c491d-4d0f-bdcb-a9ca-0000388a5e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21266a98-e430-7bb7-b010-00004a69aa17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ea328d-a3e8-a9c7-3e35-0000b03492aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1e0e0d-694b-2250-b2ad-00009822c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639518a7-f52a-4878-34e7-00002a3ff1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35cb9a5-4168-0a0c-56fa-00007c1fd2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/bin.sh","pattern":"[url:value = 'http://162.255.251.91:50087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5072181-824f-9570-1e7f-0000067ab4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.66/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.66/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe0c950-28f0-1e83-202f-000022f8e59a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.67/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.67/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0eeb34-e289-e7fa-9b69-00008d260f0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.104/svchost.exe","pattern":"[url:value = 'http://217.60.241.104/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb6ef8e-7cb0-4027-007d-0000e4398ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.253.48:55721/i","pattern":"[url:value = 'http://182.121.253.48:55721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae77c91-d23c-664c-ed7a-0000b543d6e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/i","pattern":"[url:value = 'http://162.255.251.91:50087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2310fb0-2f08-fc6c-22e5-0000e76ea7f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://104.239.66.207/s.ps1","pattern":"[url:value = 'http://104.239.66.207/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a965669-f4cc-255f-238e-000046fd79d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://baltos.online/asset/update.dat","pattern":"[url:value = 'http://baltos.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08890af3-169f-7012-39c2-00002d7f5b21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/i","pattern":"[url:value = 'http://182.119.58.252:48725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1067a4a8-1c1b-8c86-ee7f-00003aa0c470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/i","pattern":"[url:value = 'http://42.224.169.34:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58fb56-ce00-0e0f-a604-00000ebff6e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/bin.sh","pattern":"[url:value = 'http://60.17.89.214:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0135ad7f-313c-7305-7cb2-0000e6c16c45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/bin.sh","pattern":"[url:value = 'http://42.228.252.188:39953/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa41377d-1233-0115-bbcb-000039836f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc","pattern":"[url:value = 'http://94.154.43.95/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52bd592-521f-fad5-3cd8-00005a12e1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mips","pattern":"[url:value = 'http://94.154.43.95/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a85a9e94-bae2-2564-39d0-00006a104a54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm4","pattern":"[url:value = 'http://94.154.43.95/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f13d52a-74d1-093b-ba8d-0000b95df693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.sh4","pattern":"[url:value = 'http://94.154.43.95/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f306b3-4e74-64d2-423b-000041800110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.x86","pattern":"[url:value = 'http://94.154.43.95/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5dae02-9eaa-7099-1fe2-0000d2ac2d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm5","pattern":"[url:value = 'http://94.154.43.95/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f9135b-0b28-8c69-69fb-000031118f85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mpsl","pattern":"[url:value = 'http://94.154.43.95/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4654ffb8-3671-b36a-feea-0000c01982df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm6","pattern":"[url:value = 'http://94.154.43.95/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a907e144-64e7-6997-bbdb-00005ae43715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.m68k","pattern":"[url:value = 'http://94.154.43.95/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3153cf2e-4e1b-45aa-be86-000078a5e5ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm7","pattern":"[url:value = 'http://94.154.43.95/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303b8f34-023c-f18b-3161-0000da046572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i486","pattern":"[url:value = 'http://94.154.43.95/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c257dce-7921-d9ec-6fe8-0000bed22d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc440","pattern":"[url:value = 'http://94.154.43.95/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a213df-9673-d740-d476-00002b94b4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm5","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a52349-f673-5768-1ddb-00009328d3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ab4265-0ed5-5d6f-779d-000039211b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm6","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bf5b5a-ecb8-37f6-aa7a-000097ccc479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i686","pattern":"[url:value = 'http://94.154.43.95/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd4684f-f287-45e8-a57d-0000a32a785a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mips","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce41f1b7-2f5b-68ad-aeb5-0000381b0c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.sh4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f85c99-f750-ef1b-1d31-0000a3dcae80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.m68k","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f65a711-0e08-51fc-6cb8-0000350c332f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1313e0-3e39-945d-ca8a-0000b8c595f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de06ae86-2c20-9a61-37c9-0000c8291610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mpsl","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd40e687-d350-39de-dde7-00006ef45dec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i686","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d638752-477b-4ecb-a1d6-00003b378113","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc440","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec432e9-ab8f-c6ec-2d05-0000233cfce7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i486","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a1222e-23cf-37eb-ecf4-0000c0c6fb8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.x86","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfac72f3-10e1-8245-6c71-0000819d7c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm7","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8e03f3-1600-f5c3-5b27-000062d97589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6fba96-7057-0040-1a1d-0000cecfbbfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--490ad79d-4fce-b7b3-21c8-00002f11d482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16bc63d-62bc-4879-d2c8-00009f05fba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036ac723-1cf5-17e5-1965-0000e7a174db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c84bf2-a342-c15a-600a-0000c4043e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6a87d5-f65e-06d0-3384-0000a69134c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dd8b58-4589-7a01-8ea8-0000b6ccd588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9464e6f9-e8ea-b261-4f46-00000c98fc4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28f690f-e4f1-f8c6-b046-000036124c7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650da99-bc0a-b8c6-da53-00001608ba26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48629787-f575-5ad0-be9a-00008db0544a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d036b9ed-1e70-5b9a-3f7b-0000aff186e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1a8d3b-d0d1-93b6-5f36-0000af07503f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a130bba-e77c-8923-197f-00005bf5a647","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e363d66f-501b-651b-551e-0000b4249b2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc05ba0-74e8-401c-5282-0000ef255efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6db743-0d76-e14f-d5b2-00001e2d53a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f3d823-bf71-ef86-f7c1-0000a32851c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae129d69-a908-daec-fe98-0000842630b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e23ea9bf-3019-dfeb-95f2-000084d0e66a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--788613a1-3b86-968a-8382-000049f81506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66cf6ab-8d1d-2d85-8037-000027b99cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a13a74-d277-6586-3996-000023f6c832","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b02c7cf-c4ca-4c06-0eb0-00000430b40d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698787dc-8c0a-5d35-b372-000077fb919c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/i","pattern":"[url:value = 'http://60.17.89.214:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ecc9ed-e59a-ea71-7b53-0000e6c8c498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/bin.sh","pattern":"[url:value = 'http://123.11.12.92:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741b9a61-55ef-9bdf-8a3b-0000bca84fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/bin.sh","pattern":"[url:value = 'http://125.41.9.22:56917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1811b448-0a26-c6e7-f715-0000514f19a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.236","pattern":"[ipv4-addr:value = '41.216.189.236']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d6aa69a-90a1-2a2f-73f6-000011f8ea0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.92","pattern":"[ipv4-addr:value = '41.216.189.92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca582c07-da67-a049-8dbd-0000d87a8351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 91.92.42.213","pattern":"[ipv4-addr:value = '91.92.42.213']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d7d582a-02b6-205b-a02e-00009d7a5c48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sysorbit.apk","pattern":"[url:value = 'http://94.154.43.244/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deefa78-b4b7-bb96-a5bb-00000775ba83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.202.198:40071/i","pattern":"[url:value = 'http://115.49.202.198:40071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1503ccc-9a30-211b-f5c4-0000745b0230","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/i","pattern":"[url:value = 'http://123.11.12.92:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbaad3-fdcf-2d5b-2438-00003e509162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mipsel","pattern":"[url:value = 'http://94.154.43.244/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89bfa20-9250-e619-9b16-000045b5400d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d54145","pattern":"[url:value = 'http://5.182.210.174/d54145']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbc2810-53fb-d4e8-2700-000077dab7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef509d38-c763-5e41-4d29-0000718a54ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arc","pattern":"[url:value = 'http://94.154.43.97/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fce526-af72-7b05-fb4f-00005fb4c6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab77eedb-13ad-bbdb-4bdb-00007b36a529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6b53f","pattern":"[url:value = 'http://5.182.210.174/d6b53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3d1b7b-f2fc-a336-0429-00005d8c454a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.i686","pattern":"[url:value = 'http://94.154.43.97/bins/David.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a6b753-5d1f-f4e0-7698-00000ebdeb96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d6369","pattern":"[url:value = 'http://5.182.210.174/1d6369']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586d2727-ab35-3dcc-56cc-000020b2ba13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bae1f5","pattern":"[url:value = 'http://5.182.210.174/bae1f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2801fd-821a-3475-6293-000065c43ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c5700","pattern":"[url:value = 'http://5.182.210.174/2c5700']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25230d6b-0872-dc47-a1ff-0000a73d6e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c085b3","pattern":"[url:value = 'http://5.182.210.174/c085b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034d35a-1b8a-1065-8c9e-00001efc8cb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9a19b5","pattern":"[url:value = 'http://5.182.210.174/9a19b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec00727f-52d7-b747-ebfd-0000b6d2715b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b7ecfa","pattern":"[url:value = 'http://5.182.210.174/b7ecfa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba98bf1-4eff-45d0-58f9-0000370d061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5d99","pattern":"[url:value = 'http://5.182.210.174/5b5d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09d59c0-2e97-7a0c-ab3b-0000801edaca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/734ef2","pattern":"[url:value = 'http://5.182.210.174/734ef2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e75d3c-d09f-8771-0cd3-0000e87c0d3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.97/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49190e27-c41c-689c-f6b1-0000339c90cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/607754","pattern":"[url:value = 'http://5.182.210.174/607754']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbfec5e-1e86-6a82-70cd-00003b4154d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6af350","pattern":"[url:value = 'http://5.182.210.174/6af350']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6c48fa-f901-3cbe-8ed1-000030815b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mips","pattern":"[url:value = 'http://45.207.196.86/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b03ad97-4409-d04e-3e9c-00008e8a784e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsel","pattern":"[url:value = 'http://45.207.196.86/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedf8841-5167-dd1b-f604-000060187f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv6l","pattern":"[url:value = 'http://45.207.196.86/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f0d419-3a9e-8018-5086-0000bf682f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.aarch64","pattern":"[url:value = 'http://45.207.196.86/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b66a80-bc37-b98b-843b-0000a853cb2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.arc","pattern":"[url:value = 'http://45.207.196.86/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca362312-3adf-cb30-e250-00009ac7d082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sh4","pattern":"[url:value = 'http://45.207.196.86/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a665b7f0-0556-6a34-dbdb-0000d7ee9b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.x86_64","pattern":"[url:value = 'http://45.207.196.86/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81407c2c-735f-781a-d79c-000030778dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.m68k","pattern":"[url:value = 'http://45.207.196.86/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece9eac3-5a94-ece6-d02d-00001ad82ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv4l","pattern":"[url:value = 'http://45.207.196.86/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2261d5-7b6b-785b-37b6-0000d6b2a9da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sparc","pattern":"[url:value = 'http://45.207.196.86/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c4b900-1a6b-7f8e-361c-00005d785631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv7l","pattern":"[url:value = 'http://45.207.196.86/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f2db82-7b25-7f81-9dca-000027b80551","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv5l","pattern":"[url:value = 'http://45.207.196.86/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--187c125c-aee4-e33e-3a17-0000b097dfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.i486","pattern":"[url:value = 'http://45.207.196.86/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e790e-b1b2-9829-dba9-0000dcc3a7a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sparc","pattern":"[url:value = 'http://94.154.43.244/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b20953eb-ee75-7b8a-6af3-0000b98bcc6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arc","pattern":"[url:value = 'http://94.154.43.244/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8045f8cd-579a-1715-d296-0000b7d29e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.powerpc","pattern":"[url:value = 'http://45.207.196.86/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62dbd901-f54a-62bc-750d-0000b44f5af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/i","pattern":"[url:value = 'http://112.248.82.251:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e5c409-44cb-dc6e-7035-000084517acd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/telnet.sh","pattern":"[url:value = 'http://45.207.196.86/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f15af5-527f-e8cc-3159-0000cd978382","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.207.196.86/cat.sh","pattern":"[url:value = 'http://45.207.196.86/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71df967a-4ef9-3ad8-b35f-00009c674a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsrouter","pattern":"[url:value = 'http://45.207.196.86/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc1c3d8e-e368-c391-9574-000061346719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/i686","pattern":"[url:value = 'http://45.207.196.86/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540b2dfd-75ac-ebcf-f7a9-0000fe92261e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/spc","pattern":"[url:value = 'http://45.207.196.86/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fb2cc2-02a3-52d8-d76a-000075034788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/dbg","pattern":"[url:value = 'http://45.207.196.86/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dcfd6c-20a8-d12d-0f25-00009bcc7686","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/i","pattern":"[url:value = 'http://125.41.9.22:56917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0337cd08-d220-a039-192b-00003c8c1819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin","pattern":"[url:value = 'http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c95c9e-0204-d189-7d43-0000f74db88e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.136.41:41095/bin.sh","pattern":"[url:value = 'http://59.96.136.41:41095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab9c112-8e83-9559-17b9-00008b88df5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d0ab28","pattern":"[url:value = 'http://5.182.210.174/d0ab28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db312c7-9a61-56b2-e99b-00004a0a57b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cd35f","pattern":"[url:value = 'http://5.182.210.174/3cd35f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2538ecee-a254-9f28-2b80-00008dc3bc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/552ff2","pattern":"[url:value = 'http://5.182.210.174/552ff2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664fd96a-1373-bb4e-dcea-000007af2969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/xzOQ","pattern":"[url:value = 'http://129.121.114.124/xzOQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074691bb-9759-be90-fd36-0000ca980ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e78460","pattern":"[url:value = 'http://5.182.210.174/e78460']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c1586a-0ec2-26c4-dbea-00002f372e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/475040","pattern":"[url:value = 'http://5.182.210.174/475040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5bf961-f9bd-5dab-e392-000084a4368c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5S4","pattern":"[url:value = 'http://129.121.114.124/5S4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea3305b-a839-0e03-3a6d-0000040640b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Mxx","pattern":"[url:value = 'http://129.121.114.124/Mxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561b2aca-e724-2cbc-057d-00008d4053aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/096459","pattern":"[url:value = 'http://5.182.210.174/096459']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d5040e-0dc9-cf01-b18d-00006c3d8bcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/TXA","pattern":"[url:value = 'http://129.121.114.124/TXA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2066d0-7f32-eb15-ecca-000071369cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Hxqh","pattern":"[url:value = 'http://129.121.114.124/Hxqh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43984f63-902d-7085-35b4-000037d27828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be3b0c","pattern":"[url:value = 'http://5.182.210.174/be3b0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6651a4-8b66-ff39-6bdf-00002d7618f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/013767","pattern":"[url:value = 'http://5.182.210.174/013767']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1ce658-888f-9248-88f5-00008afc323e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8e9d9e","pattern":"[url:value = 'http://5.182.210.174/8e9d9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf5e905-76e6-3031-3de7-0000b0d6c90f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2de858","pattern":"[url:value = 'http://5.182.210.174/2de858']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83939563-b341-0a36-8241-0000dbd78cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/77fda1","pattern":"[url:value = 'http://5.182.210.174/77fda1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b582aa-26b9-f8dc-0f7c-000092272057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad49f7","pattern":"[url:value = 'http://5.182.210.174/ad49f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d665bcf9-625a-5c81-3956-00003bcb7944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/actami.exe","pattern":"[url:value = 'http://95.164.53.193:5001/actami.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03061762-0204-47ed-5981-000053c57b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/uos.bin","pattern":"[url:value = 'http://95.164.53.193:5001/uos.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdfc086-2dbe-34eb-a423-0000cc583a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/heras.exe","pattern":"[url:value = 'http://95.164.53.193:5001/heras.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20480018-b15b-9a16-ae88-00009e447ee4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/tris.exe","pattern":"[url:value = 'http://95.164.53.193:5001/tris.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca129c81-a3a4-7ae4-e729-00003acc808d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf407ed6-812f-47e6-ffdc-0000ba12197b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c2fec7-1a87-d374-1d6e-00009fc3aa20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b07e09-8010-f37a-73c7-0000817a9953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b66439e-0df5-4fa4-3d2d-00007c7e0894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c03744-d8ca-0c42-bdb5-0000888602d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7a0ad4f-6ff9-06cb-4a8e-000042cfeef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85422d8-f232-6c12-d5a3-0000bc58f223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c0cd8-6e32-73d9-2ca8-0000f43612b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8784b6c6-3554-d607-77c9-0000391ee1dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26f1224-2225-1bfc-99ab-00006ecba77a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19030031-ecfe-9bea-8b39-000048d69baa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz.sh","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62da21fa-65cd-0785-3a43-0000a6bc9de3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/debug","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5110380e-4b54-b3de-da32-0000f4c0c46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856822b2-32fb-ff06-ae4b-0000d677c01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02781a43-65ee-65cf-5165-0000685975e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bcb40a-164b-6969-f528-0000bb9f54e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/bin.sh","pattern":"[url:value = 'http://182.116.36.226:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4569682-374b-73f8-88a0-0000b3d453a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe","pattern":"[url:value = 'https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8067fc-dbb4-5c68-35ee-00008facb1f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mips","pattern":"[url:value = 'http://95.155.151.113/d/slim.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637e6cdd-7427-1b39-0cd4-00000fd29b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/i","pattern":"[url:value = 'http://182.116.36.226:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ea35a1-16b2-c3d0-b610-0000ce22bb1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/gpon.sh","pattern":"[url:value = 'http://95.155.151.113/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e01741cf-310f-257e-5497-000004346fb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/single.exe","pattern":"[url:value = 'http://95.164.53.193:5001/single.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2b42231-121c-4b2b-90d0-0000ba61fb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/lol.exe","pattern":"[url:value = 'http://95.164.53.193:5001/lol.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f079e3-1da9-cbdd-1f61-00001c921bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/term.exe","pattern":"[url:value = 'http://95.164.53.193:5001/term.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2baf9418-169c-f34e-f883-0000b507462a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4d9fd5-f1bc-07ae-654c-000081801916","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/babust.exe","pattern":"[url:value = 'http://95.164.53.193:5001/babust.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc0af7b-92a5-9126-75ce-00001e29a0a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ntmyebewekca.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ntmyebewekca.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5cb21ac-7a3b-65c8-fc6e-0000a43def94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/msis.exe","pattern":"[url:value = 'http://95.164.53.193:5001/msis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b01bb-71b3-8eef-ae82-000088da9cbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/anfo.exe","pattern":"[url:value = 'http://95.164.53.193:5001/anfo.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d5286d4-fd12-52d4-c2ec-0000964ad70a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dt.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dt.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70488358-c67a-59d0-1b7f-0000fe7038fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/suza.exe","pattern":"[url:value = 'http://95.164.53.193:5001/suza.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cf350b-4880-3e74-52ff-000051c9b778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/jhgjse.exe","pattern":"[url:value = 'http://95.164.53.193:5001/jhgjse.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7c6a32-0812-36d5-a288-00001538ca66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/maya.exe","pattern":"[url:value = 'http://95.164.53.193:5001/maya.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21401676-9bce-65f3-3ace-0000ce4ea52a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/mina.exe","pattern":"[url:value = 'http://95.164.53.193:5001/mina.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64475be-296d-adcf-0a57-0000184f9e48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ados.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ados.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4e14ce-b82f-d1b2-1898-0000d08d45da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/adas.exe","pattern":"[url:value = 'http://95.164.53.193:5001/adas.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1852a135-9525-6dc5-8302-0000e4afdfbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/slim.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f87d40-a9ff-116b-9c65-0000ad1bb582","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm7","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--457827c0-9f2e-7ec5-0c98-0000e1c298c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/realtek.sh","pattern":"[url:value = 'http://95.155.151.113/realtek.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c089394-365c-33be-5559-00005adb04f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm64","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d6bf15-f16c-d23e-9249-0000e276e105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dit.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dit.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf216d0-54fe-da10-ad45-000036d45683","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/bin.sh","pattern":"[url:value = 'http://125.42.13.21:45097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52262f23-8924-3700-efe6-00000e6c00d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/i","pattern":"[url:value = 'http://125.44.219.81:55457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3941a9d-d9d6-68ad-c04c-000046f2c348","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/bin.sh","pattern":"[url:value = 'http://42.230.47.176:47866/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d356b42e-018e-4594-2050-0000c404b1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/bin.sh","pattern":"[url:value = 'http://115.56.169.46:45542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cad5293-135f-fa7b-c78b-00002bc9a388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/i","pattern":"[url:value = 'http://115.52.234.218:36909/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac355db3-c835-3168-8ccb-00006ac8e271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ClashRoyalV2.apk","pattern":"[url:value = 'http://64.89.163.215/bins/ClashRoyalV2.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790121e6-6132-6a8e-681c-0000a281ccb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mips","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad793b5a-5560-06c4-ed4c-00008036c8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm7","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7e0bcc-70f2-a90e-3e73-0000388aafa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm6","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f401db77-fcb4-8041-8d26-0000b00317cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x86","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61beeba8-d994-f90d-19ac-0000b24efdbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43775a76-7052-ba90-a424-00002a3f004e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm5","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--591a9d5b-9549-e714-1735-0000ad12898b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mipsel","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848c97d5-7e2a-95cf-a676-0000a53a6127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dafdd1e-9b3c-0023-1480-00009031cef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/i","pattern":"[url:value = 'http://125.42.13.21:45097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7a6a587-3316-c1f6-472f-0000fcc9067d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/i","pattern":"[url:value = 'http://115.56.169.46:45542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20331d94-7b9c-052c-f3f6-00004ed058a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/bin.sh","pattern":"[url:value = 'http://123.4.234.31:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b839f6-4dab-238c-ed1f-00008e01fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.194.16:48972/bin.sh","pattern":"[url:value = 'http://60.23.194.16:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2165dfeb-5cc5-837f-0680-00006ab936c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/bin.sh","pattern":"[url:value = 'http://182.119.196.19:60380/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ecfb8cf-2349-e96f-ca22-000049426f4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/i","pattern":"[url:value = 'http://182.119.196.19:60380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--771da6c2-ba32-91b1-2842-0000fd067041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.234:60432/i","pattern":"[url:value = 'http://42.231.88.234:60432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f6032d-8783-f217-df3f-0000bb1094c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/bin.sh","pattern":"[url:value = 'http://175.175.92.119:49061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cdf037-4336-1f52-3421-0000243be9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/bin.sh","pattern":"[url:value = 'http://123.5.157.40:59329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca51ecdc-bcef-27d1-4aaa-00009e4254b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip","pattern":"[url:value = 'https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46a468e-f1da-cba4-cf84-000014991315","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/bin.sh","pattern":"[url:value = 'http://61.53.237.126:41063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91b676-8616-05a7-71dd-0000919dfb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip","pattern":"[url:value = 'https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659acb1b-37d0-d104-8573-0000dcd17d85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip","pattern":"[url:value = 'https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e0329c-ef28-ac01-7159-00004d05b273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbc48f3-17db-abcd-f37f-0000b983b2b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ad551-9915-a041-81de-0000eef98858","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f12a9e90-d26c-0287-8210-00003d1c93ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5b7cf9-7784-c8d1-e1c6-00003150b31c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip","pattern":"[url:value = 'https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4096a64d-efaa-a716-3f2d-00006d057663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/73/gooddaycomingforu.hta","pattern":"[url:value = 'http://204.44.69.222/73/gooddaycomingforu.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5a60c2-9e52-495d-5bcf-0000881ed4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/i","pattern":"[url:value = 'http://123.5.157.40:59329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc5ba36-6e9c-a0ca-dd87-000021b4ac9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/i","pattern":"[url:value = 'http://61.53.237.126:41063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562fd81d-ab29-c686-542e-000002b80795","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/i","pattern":"[url:value = 'http://175.175.92.119:49061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1b3ba8-9a4d-29cc-97b5-000095ca6fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/bin.sh","pattern":"[url:value = 'http://115.55.197.125:40668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48233fac-633c-647e-aaf2-0000deadbaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/i","pattern":"[url:value = 'http://103.31.103.204:36161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a476915-e766-a802-24e0-0000b21c20f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/bin.sh","pattern":"[url:value = 'http://120.28.139.121:34906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--982a1951-e23e-6533-c87e-0000d9b3617f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.97.94.72:56444/bin.sh","pattern":"[url:value = 'http://123.97.94.72:56444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2008528-5f0e-9f68-10cb-000084dc3e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/bin.sh","pattern":"[url:value = 'http://120.84.213.5:42072/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5bfa0a7-8fe3-9086-2777-0000dd981c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/bin.sh","pattern":"[url:value = 'http://219.155.223.157:48528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c8dc78-b0d2-2223-2e7d-000016a6bcde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/bin.sh","pattern":"[url:value = 'http://182.116.70.209:50318/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188523a-723b-6892-863d-0000b664116d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/i","pattern":"[url:value = 'http://120.28.139.121:34906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79861c5a-77d5-e299-f8ed-000077f195f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/i","pattern":"[url:value = 'http://219.155.223.157:48528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd3630-f876-0f62-c722-0000ecd1fe5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/bin.sh","pattern":"[url:value = 'http://112.248.82.251:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3717554-fb94-6138-2f25-0000ea890f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/i","pattern":"[url:value = 'http://120.84.213.5:42072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7c302-2d5e-167b-f810-000042203311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/i","pattern":"[url:value = 'http://123.12.79.182:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0f48ce-a97a-9f1c-5414-0000c7582694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.209.189:46958/i","pattern":"[url:value = 'http://115.49.209.189:46958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec58e27-e449-7f46-1f5c-0000877a96af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/bin.sh","pattern":"[url:value = 'http://42.235.89.134:36799/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ecc302-18d5-462e-16f9-0000be99bb8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.38.199:36695/i","pattern":"[url:value = 'http://105.224.38.199:36695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5bfc79-444a-d40e-1334-0000ebe63062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/i","pattern":"[url:value = 'http://115.55.113.143:47041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4771ec2e-1c32-9115-91ec-0000136cd349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/i","pattern":"[url:value = 'http://42.235.89.134:36799/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45dc5961-43da-ed65-c695-0000597f9c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/bin.sh","pattern":"[url:value = 'http://175.151.82.88:52513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0f2b3d-120e-ec19-f970-00003e0ad33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/bin.sh","pattern":"[url:value = 'http://42.237.60.215:54523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2121b1-f044-0cc7-d987-0000f01cd428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/bin.sh","pattern":"[url:value = 'http://115.52.234.218:36909/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2079433-b614-9810-44e5-00005912c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/bin.sh","pattern":"[url:value = 'http://115.59.22.163:43214/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d940a605-8f5b-cf51-94e8-00007c3cdd63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.105:38525/i","pattern":"[url:value = 'http://163.142.95.105:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a19181-cb42-121a-8712-0000dd0a1c3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/bin.sh","pattern":"[url:value = 'http://222.219.74.117:52755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9529f71-e31d-242d-ca18-0000d2f9e10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/i","pattern":"[url:value = 'http://115.59.22.163:43214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb9076c-38e9-95d0-bf02-00004847eaf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/i","pattern":"[url:value = 'http://103.160.130.178:50403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca7d5ef-182c-c98e-4b17-0000e235d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/i","pattern":"[url:value = 'http://42.233.107.216:48024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3bc3d20-3d73-f356-196d-00006404b494","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/i","pattern":"[url:value = 'http://123.129.131.159:42876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84898cff-6be0-a8ea-512f-000049bc9d04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5223853602/uDSthxb.exe","pattern":"[url:value = 'http://62.60.226.140/files/5223853602/uDSthxb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b481a43-9a8f-3d16-7974-00004e804575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/1781548144/Ql0IJZ0.exe","pattern":"[url:value = 'http://62.60.226.140/files/1781548144/Ql0IJZ0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6ee341-2d01-2cad-b403-00005a774e06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/bin.sh","pattern":"[url:value = 'http://117.253.29.68:48477/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72bcc0df-84a4-aad8-1f33-00007b8e1f38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/i","pattern":"[url:value = 'http://61.52.138.43:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54449a18-ac0e-44f7-0a88-00001c5c502b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.193.250:53397/i","pattern":"[url:value = 'http://115.49.193.250:53397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c01272-11f6-d7b8-1f59-000040934b64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.8.86:51962/i","pattern":"[url:value = 'http://115.63.8.86:51962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27bb668-3b3b-cdf3-6da1-0000c7fa7e7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.189.22.51:43030/bin.sh","pattern":"[url:value = 'http://123.189.22.51:43030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0c3844-5ed1-c3b9-cada-00009dcc90a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/i","pattern":"[url:value = 'http://117.253.29.68:48477/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807d02a7-e115-efd4-d74c-000034c361c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/bin.sh","pattern":"[url:value = 'http://112.248.83.6:56719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f7c0ae-dd72-e0b9-e0ec-0000cfb385e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/bin.sh","pattern":"[url:value = 'http://42.227.204.129:58208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845b34f5-6bf6-86d2-353a-000000ea8f9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/bbc","pattern":"[url:value = 'http://94.183.233.225/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23516972-b5f2-4542-c524-00000b50483f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/i","pattern":"[url:value = 'http://112.248.83.6:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--412b8636-c43a-7265-2fc9-000015f51a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_aarch64","pattern":"[url:value = 'http://94.183.233.225/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e80745-20af-334d-d654-000063b7f60b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/bin.sh","pattern":"[url:value = 'http://110.39.231.36:48526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c39f21-9741-fe20-fb90-0000394d6c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/bin.sh","pattern":"[url:value = 'http://61.136.49.183:57439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94da5229-4c1d-93fe-55ea-00002d613c49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/i","pattern":"[url:value = 'http://27.217.3.109:54209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b7b231-8404-117d-4844-0000522920e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/i","pattern":"[url:value = 'http://61.136.49.183:57439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab90e79e-b414-a9a4-7113-0000e2cb2690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/i","pattern":"[url:value = 'http://110.39.231.36:48526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e350e8e0-9c20-fd4d-f7a9-0000a058bdfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/i","pattern":"[url:value = 'http://115.54.132.26:37475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b10d02a-b684-208e-bee2-00005d2353c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/bin.sh","pattern":"[url:value = 'http://113.228.209.236:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c264aee-87e2-47fe-eb28-00008f919a0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://triflackcom.com/main2.exe","pattern":"[url:value = 'http://triflackcom.com/main2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f40292-c3c7-b1c4-cd5f-000082077d8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/i","pattern":"[url:value = 'http://113.228.209.236:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feeaf12d-b47e-b7f0-d828-0000899b4b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/i","pattern":"[url:value = 'http://77.236.74.65:45120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4e81b8-bc7b-fa72-d7b3-00008cc72f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/bin.sh","pattern":"[url:value = 'http://124.235.243.150:48322/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ac025c-e4ed-c712-8629-00007c861f5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://212.164.115.235:53219/bin.sh","pattern":"[url:value = 'http://212.164.115.235:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0028fd38-95f7-ec41-856b-00004aa9c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_hk","pattern":"[url:value = 'http://95.155.151.113/sensi_hk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14491048-fc6d-0ff8-fc1a-0000cf3d72a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.sh","pattern":"[url:value = 'http://95.155.151.113/unifi.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce8cc01-c349-5cb2-24bb-00003c2add9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.aarch64","pattern":"[url:value = 'http://95.155.151.113/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce43bd3-f71b-ad4d-3c21-0000e06c0702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.arm64","pattern":"[url:value = 'http://95.155.151.113/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3a6989-2dcc-72a8-137c-000068a16c91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tp","pattern":"[url:value = 'http://95.155.151.113/sensi_tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60226aab-919f-6264-5ae7-00006b293586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/huawei.sh","pattern":"[url:value = 'http://95.155.151.113/huawei.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08ceeaf-8f7b-8191-f04d-000002a14e5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm5","pattern":"[url:value = 'http://95.155.151.113/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ec2aa8-0fe3-ad6f-e1b2-0000e5ca2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_av","pattern":"[url:value = 'http://95.155.151.113/sensi_av']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ead42f8-a93e-b5bb-93b7-00002589954a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/netgear.sh","pattern":"[url:value = 'http://95.155.151.113/netgear.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f488b86e-b5fe-8f91-1f2b-000079408cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/hnap.sh","pattern":"[url:value = 'http://95.155.151.113/hnap.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34ef9f8-2c96-96ff-2903-00001bbb5176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi","pattern":"[url:value = 'http://95.155.151.113/sensi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49e2663-1f91-7ec8-c15a-00006a8e0d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tbk","pattern":"[url:value = 'http://95.155.151.113/sensi_tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e327a6c-a8bc-ce17-d95d-0000a8bcb788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm64","pattern":"[url:value = 'http://95.155.151.113/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf573955-b668-7457-73a0-0000658ae0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/bin.sh","pattern":"[url:value = 'http://77.236.74.65:45120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a259dc68-0c7e-f7f6-773e-00008d88bcd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/bin.sh","pattern":"[url:value = 'http://105.225.133.213:37257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9088a77-2341-5c95-b79f-00006a7fc331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/i","pattern":"[url:value = 'http://222.138.119.216:49346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619a19a3-6b94-76ba-dc9c-0000a49275b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/bin.sh","pattern":"[url:value = 'http://120.28.139.212:38655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53f4bab-5296-2fef-02a8-000084b04c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.10.252:39675/i","pattern":"[url:value = 'http://196.190.10.252:39675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a66bad-6bcf-6352-0a8b-00009c6a3f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://39.80.60.21:60792/bin.sh","pattern":"[url:value = 'http://39.80.60.21:60792/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2609677-98bb-c1c7-9f03-0000cf61775d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/bin.sh","pattern":"[url:value = 'http://110.138.134.69:46780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21ad689-b189-6b28-40da-00003092fee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.104.208:40454/i","pattern":"[url:value = 'http://182.127.104.208:40454/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f3508-8c2d-5d1a-68fe-0000f385ebfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/bin.sh","pattern":"[url:value = 'http://175.107.229.126:33054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc882bc1-c7ac-7c53-107b-0000f1084f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.10.48.253:40771/bin.sh","pattern":"[url:value = 'http://175.10.48.253:40771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8483f2c9-9462-2ec2-8b50-00003833b940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/i","pattern":"[url:value = 'http://110.138.134.69:46780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc22e234-2b49-11e6-95fb-00006e3cd8b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/bin.sh","pattern":"[url:value = 'http://42.233.107.216:48024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1604ede-a809-f066-cddf-000050295ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.34.254:59706/i","pattern":"[url:value = 'http://27.217.34.254:59706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12858d7-9df7-199d-db24-00003b67195c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/bin.sh","pattern":"[url:value = 'http://61.53.147.92:47128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ea6af6-e6e9-927a-dbdc-00009af2c2c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/i","pattern":"[url:value = 'http://175.107.229.126:33054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81eb1ea8-6a37-ece1-295e-0000c0844dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/i","pattern":"[url:value = 'http://61.53.147.92:47128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9fac03-89ba-aec0-744e-00009432862a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d85233-b7b1-93e2-c338-0000d2de7b22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/","pattern":"[url:value = 'https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691d398f-9874-cdf2-3c55-0000739df819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.183.61:57147/Mozi.a","pattern":"[url:value = 'http://115.55.183.61:57147/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664e8e6c-c3f4-f7f3-a24c-000081dfaede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/bin.sh","pattern":"[url:value = 'http://196.189.98.110:53335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ceb504-02d2-eb7c-92cf-000016115819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/bin.sh","pattern":"[url:value = 'http://42.230.33.248:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abdb35f7-98e3-ac07-c41a-0000f7cde9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279be813-72ea-2f84-212f-00001b6c6b88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://www.mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff7d1fd-a50b-eed0-1c07-0000f2903663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/i","pattern":"[url:value = 'http://42.230.33.248:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8ea3eb-def5-0d64-2cb7-0000deeb3b4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/i","pattern":"[url:value = 'http://196.189.98.110:53335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83786f08-5fb2-ce73-0698-000046de9af3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/bin.sh","pattern":"[url:value = 'http://203.101.187.19:52053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e9063f-0188-1958-a020-000054cd1a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/bin.sh","pattern":"[url:value = 'http://210.208.111.2:36838/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e08419b-8d07-e99c-2f05-0000e289e4c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/i","pattern":"[url:value = 'http://203.101.187.19:52053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa488ca-f0c9-0151-a5b2-00004aaf2325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/i","pattern":"[url:value = 'http://113.231.229.97:60941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77d492e-fa32-a5d4-d1f4-0000c9aad74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/i","pattern":"[url:value = 'http://210.208.111.2:36838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fcb9ff-7bf0-ab78-9828-0000cbe2daf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/i","pattern":"[url:value = 'http://221.15.226.18:57698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84445c7a-47fa-7aaa-b511-0000caaf3f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/bin.sh","pattern":"[url:value = 'http://221.15.226.18:57698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e5a871-f721-2b13-9f0f-000017fb670c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.21.60:54714/i","pattern":"[url:value = 'http://110.37.21.60:54714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0986c5e3-b406-773b-bd22-0000ed842e40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.252.205:60751/i","pattern":"[url:value = 'http://182.114.252.205:60751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3472f654-6691-6c07-f4b8-0000632e95dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/bin.sh","pattern":"[url:value = 'http://42.235.55.88:55713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3320e9-502b-cde6-95a6-00007811eb0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/bin.sh","pattern":"[url:value = 'http://61.52.138.43:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b63806-112f-c672-17c2-0000c566938f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/bin.sh","pattern":"[url:value = 'http://115.55.113.143:47041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cadd4e8-d0a5-123b-4489-00001eb41ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/i","pattern":"[url:value = 'http://61.54.194.76:45113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e4d60f-9822-c033-f021-00008f2f4623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/bin.sh","pattern":"[url:value = 'http://125.43.116.242:47371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0230e65-5e07-8082-a71f-0000868e1029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.236.232:44430/i","pattern":"[url:value = 'http://115.55.236.232:44430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab4dfc7-7d9b-bbf9-67ab-0000aa3a6b54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/bin.sh","pattern":"[url:value = 'http://110.136.13.79:50906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ec8634-8a65-f1e0-e8ad-00001371997a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/bin.sh","pattern":"[url:value = 'http://110.36.11.225:51361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126f47e8-66ed-cbad-73d7-000031b261af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/bin.sh","pattern":"[url:value = 'http://110.37.119.220:37643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b806b1c-66a3-7ed8-4ab2-00008afb2edd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/i","pattern":"[url:value = 'http://125.43.116.242:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530f9a47-7edd-00ca-1091-00009ab2a1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/i","pattern":"[url:value = 'http://42.235.55.88:55713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335bdbd0-a0d0-85d0-2ebe-0000e78ae405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/i","pattern":"[url:value = 'http://110.136.13.79:50906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0d4bf25-91e0-c225-926c-0000281365cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/bin.sh","pattern":"[url:value = 'http://115.50.144.52:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6831bfed-4cf6-4f8c-975b-000067cfb478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.89:36540/i","pattern":"[url:value = 'http://110.37.119.89:36540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b82a25a9-1365-547d-4af9-000011973ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.229.247.64:58197/bin.sh","pattern":"[url:value = 'http://42.229.247.64:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64002448-f93f-d041-8811-00007b177814","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/i","pattern":"[url:value = 'http://115.50.144.52:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9152f7f4-17bc-f7d2-568b-00009823d991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/i","pattern":"[url:value = 'http://219.157.18.143:41104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0825a89-ed0c-1150-189c-0000597032a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/bin.sh","pattern":"[url:value = 'http://182.119.58.252:48725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b07602-c3dc-26f3-3fe3-000045f6fc48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/bin.sh","pattern":"[url:value = 'http://123.9.241.164:43002/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26a8879-ac15-d380-9838-0000f16b8cb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/bin.sh","pattern":"[url:value = 'http://115.52.179.220:43157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cde4e69-881a-ebb9-9a80-0000bce128d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/i","pattern":"[url:value = 'http://123.8.17.147:53523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c117f0-78b7-cf5a-2132-0000a8524006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.190:43969/i","pattern":"[url:value = 'http://120.84.212.190:43969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec14fdc7-6a19-850f-01b8-0000db5e8e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/bin.sh","pattern":"[url:value = 'http://123.9.25.110:38551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95eb0f19-54a3-3592-1b50-000057c1fafb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.115.64:41484/i","pattern":"[url:value = 'http://219.156.115.64:41484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--019b08ff-3226-690b-c943-0000e5eab186","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.236.157.223:50944/i","pattern":"[url:value = 'http://113.236.157.223:50944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd77960e-3b4c-695a-4bd2-00001792a11a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/i","pattern":"[url:value = 'http://42.230.24.112:44963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e4ce58-f880-e289-9cf5-000064c7e665","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/i","pattern":"[url:value = 'http://61.52.156.140:46601/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb57108-d08b-68f6-cdaf-0000774a1bfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/bin.sh","pattern":"[url:value = 'http://182.119.183.1:55955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471c0e38-92a4-450c-6b9e-0000548c8000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/bin.sh","pattern":"[url:value = 'http://219.157.212.157:59656/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19525b0a-6063-0976-bf91-000025cb7426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.69:54758/i","pattern":"[url:value = 'http://115.48.149.69:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bd83f3-a56f-e007-e2b5-0000e68a8c2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/bin.sh","pattern":"[url:value = 'http://42.178.164.205:52529/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c5c57-09c9-c5c6-f608-00009f8a3326","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/bin.sh","pattern":"[url:value = 'http://39.74.52.248:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545a2b8-e3fe-e3ce-f703-0000a5bc8137","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/i","pattern":"[url:value = 'http://39.74.52.248:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856f8e47-ebdb-ec30-4c90-0000f9ae1762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/bin.sh","pattern":"[url:value = 'http://144.48.123.149:50607/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8941921b-67e6-1ab5-b8d9-0000a6a99028","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/bin.sh","pattern":"[url:value = 'http://113.239.96.147:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e82399e-9789-37aa-d231-00000ec9bfdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/i","pattern":"[url:value = 'http://42.227.204.129:58208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bd3af35-8b1e-6219-7021-0000e0934116","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.183.107:44703/i","pattern":"[url:value = 'http://222.140.183.107:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78cb039f-b888-3af4-ea1d-000025a2f2e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/i","pattern":"[url:value = 'http://123.14.54.13:58614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef9c33-356d-eefb-89b0-00003f1a2416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/bin.sh","pattern":"[url:value = 'http://42.177.186.117:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf81cb3-c556-fec6-2ec5-0000667f2249","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.149.49:57320/i","pattern":"[url:value = 'http://115.62.149.49:57320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6dda6fd-a4e5-2de6-921b-0000495510cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/i","pattern":"[url:value = 'http://110.37.12.8:38162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f39dd229-f160-7770-d127-0000fe5a7056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:48636/bin.sh","pattern":"[url:value = 'http://182.114.192.237:48636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b527979b-5201-37d8-950a-00009e3abbbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/bin.sh","pattern":"[url:value = 'http://119.184.29.187:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea9e913-4811-66b0-22b7-0000caa00b00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:41202/i","pattern":"[url:value = 'http://110.37.58.92:41202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897c8ef4-544e-b79b-6fb3-0000ba0816f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/i","pattern":"[url:value = 'http://119.184.7.234:46382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6a17ae-335f-fa94-dbb6-00008f74393f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.99.250.225:49416/i","pattern":"[url:value = 'http://119.99.250.225:49416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb8d6f1-50b9-39d5-fc90-000052a80512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/bin.sh","pattern":"[url:value = 'http://125.43.0.79:34827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f395de7-7f11-3d65-253a-000008cb28b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.249.68.67:57560/bin.sh","pattern":"[url:value = 'http://112.249.68.67:57560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00cbcc74-32f5-458f-3dee-0000cc770658","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/i","pattern":"[url:value = 'http://115.55.9.151:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d377d0-d200-df34-53ff-0000065b1c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/bin.sh","pattern":"[url:value = 'http://222.137.213.31:48901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dcf7185-b401-4d5e-6d08-00002e770b5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.242:35671/i","pattern":"[url:value = 'http://120.84.214.242:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646fdca9-5963-24ae-8f61-0000d25fd5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.125:40164/i","pattern":"[url:value = 'http://120.84.214.125:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e40f14f-1b42-64cd-7722-0000f4cb1e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/i","pattern":"[url:value = 'http://42.53.72.145:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf17a54e-0054-0949-b120-0000ded128b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/bin.sh","pattern":"[url:value = 'http://117.24.218.134:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--258652c1-d937-ba88-194a-0000e84da03f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/i","pattern":"[url:value = 'http://115.55.29.170:41884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ab8c0e-4263-10a5-3899-000028dac55a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/bin.sh","pattern":"[url:value = 'http://115.54.124.37:33179/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b523854e-3e51-a1e4-bad5-00006ae1f8ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/i","pattern":"[url:value = 'http://182.116.113.119:44177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce14d5e-84d0-2a85-91d9-0000008ea58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.228.235:44677/i","pattern":"[url:value = 'http://182.121.228.235:44677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--695ecf28-ccad-a4c0-ec6d-00000299e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/bin.sh","pattern":"[url:value = 'http://123.8.17.147:53523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eac8bf0-5934-c073-2b2e-000046a59813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/bin.sh","pattern":"[url:value = 'http://115.55.29.170:41884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7329dffa-7daf-d5fa-b56c-00000837f267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/i","pattern":"[url:value = 'http://115.54.124.37:33179/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b5c8df-c803-0106-05a0-0000ca8b2d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/i","pattern":"[url:value = 'http://117.24.218.134:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d6a9ac-0976-1ebe-a503-000034619112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://179.108.89.220:43996/i","pattern":"[url:value = 'http://179.108.89.220:43996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c399cb0b-f83e-e6ef-97ac-000059fe8fe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/i","pattern":"[url:value = 'http://42.53.51.109:44329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2505f3bc-19bb-4ee8-ff4c-000077c9040e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/bin.sh","pattern":"[url:value = 'http://103.160.130.178:50403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--910ebfc4-e090-d660-ead3-0000e635e4d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/bin.sh","pattern":"[url:value = 'http://119.184.7.234:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9540d428-f938-8872-5077-000051a013e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/i","pattern":"[url:value = 'http://42.178.164.205:52529/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--395825aa-d611-0ad1-37b2-0000adda9400","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/bin.sh","pattern":"[url:value = 'http://222.134.172.2:44618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e01474-7f80-9a0d-bb5e-0000292ab0cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/bin.sh","pattern":"[url:value = 'http://125.47.244.3:55442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa44a6-c276-c0bf-f580-00008b95a4f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/i","pattern":"[url:value = 'http://125.43.0.79:34827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0463d5b8-bbd0-841b-e5ec-000017cfebba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/bin.sh","pattern":"[url:value = 'http://42.225.206.253:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba55477-526f-c2cf-1dbd-0000dda3f477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/bin.sh","pattern":"[url:value = 'http://115.55.9.151:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f737d6-df67-0045-ae84-0000ceaccba1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.85.6.186:59524/i","pattern":"[url:value = 'http://42.85.6.186:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ee43bf-b80f-b24a-aea7-0000a6922fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/i","pattern":"[url:value = 'http://123.9.241.164:43002/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e202ba-2983-ecfc-5514-0000408ddf7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/i","pattern":"[url:value = 'http://182.112.39.204:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c505ec1-abc1-58e7-9261-00002b48988b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/i","pattern":"[url:value = 'http://115.58.171.191:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10573983-2492-e7af-5550-0000ec8ea98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.126:36545/i","pattern":"[url:value = 'http://120.84.214.126:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c07905c-e488-7e84-094b-00007ef58def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/i","pattern":"[url:value = 'http://59.103.116.68:54641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fbdeee-5c88-29b0-9266-000062de7b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/i","pattern":"[url:value = 'http://42.230.35.149:47141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66582c2f-24ee-2efb-5330-00009be6f67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.239:50468/i","pattern":"[url:value = 'http://123.14.181.239:50468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ee9e09-598b-2dc4-6d95-000053d7165f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/bin.sh","pattern":"[url:value = 'http://194.28.62.99:10819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e297851-ef1f-2a3a-f33e-00003c5c6ac5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/i","pattern":"[url:value = 'http://42.224.197.152:60373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573a92ec-3124-e5e4-cb15-0000d1f55d17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.27:59432/i","pattern":"[url:value = 'http://163.142.95.27:59432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c878c17e-660e-0381-87d0-000026261f3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/bin.sh","pattern":"[url:value = 'http://180.252.209.203:43259/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4e7d78-31a6-4474-6318-0000a56117d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/bin.sh","pattern":"[url:value = 'http://42.224.197.152:60373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0d9152-be50-4c4c-5e34-00008da5783d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/bin.sh","pattern":"[url:value = 'http://175.172.13.19:60669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824162b-1f46-2ceb-7553-0000e0f5bde1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.134.211:38080/i","pattern":"[url:value = 'http://42.227.134.211:38080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b87c0cb-64bf-f2b3-8146-0000d1aafde9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/i","pattern":"[url:value = 'http://123.9.25.110:38551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5f750-19e2-0aff-622d-000013570a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/i","pattern":"[url:value = 'http://115.52.179.220:43157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0220546b-dac7-326a-1391-0000554dd9f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://82.48.207.52:56706/i","pattern":"[url:value = 'http://82.48.207.52:56706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3471a5b-2d41-0eff-65ee-0000cc0aaad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/bin.sh","pattern":"[url:value = 'http://110.37.12.8:38162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d53d7ff-3e23-3b07-2479-000076f522f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/i","pattern":"[url:value = 'http://42.86.172.171:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac30105-30de-f90c-e135-0000e9cb25e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/i","pattern":"[url:value = 'http://36.48.41.248:36948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d94156-79b0-dac6-7808-00008a2a036e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/i","pattern":"[url:value = 'http://222.137.213.31:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cadaaa3c-db1e-00c3-9621-0000ebe93639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/i","pattern":"[url:value = 'http://120.28.139.212:38655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae704fc3-7a2b-da70-1431-0000407b4fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/bin.sh","pattern":"[url:value = 'http://27.217.3.109:54209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c95d85-6155-6f5e-97d6-0000fe25c57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/bin.sh","pattern":"[url:value = 'http://42.53.72.145:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c952a5-8ce7-92b5-061c-000041f09ff6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/bin.sh","pattern":"[url:value = 'http://61.52.7.68:35582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e803e282-fc4e-69d8-dc13-0000e3864a7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/i","pattern":"[url:value = 'http://119.184.29.187:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cebd55f-bcd9-4265-cf7e-0000580126d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/bin.sh","pattern":"[url:value = 'http://125.44.219.81:55457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25003732-1a60-c178-4737-0000439ed441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/i","pattern":"[url:value = 'http://180.252.209.203:43259/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d507c9-91d7-a308-a9b3-0000d3f058d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/i","pattern":"[url:value = 'http://194.28.62.99:10819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7027cb1d-5069-d133-e8af-00006d8cce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/i","pattern":"[url:value = 'http://36.69.80.149:33303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e77f790-ba26-00e3-fc1a-00009cf96eb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.26.190:34325/i","pattern":"[url:value = 'http://182.127.26.190:34325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67108d42-fa81-41b4-c962-000014f2ea05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/i","pattern":"[url:value = 'http://182.124.41.91:59176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0c01b8-5718-ba07-c56d-00002f9697f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/bin.sh","pattern":"[url:value = 'http://182.124.41.91:59176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd9729c0-96a5-f56f-73ac-00004ff44a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/bin.sh","pattern":"[url:value = 'http://36.69.80.149:33303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4843cea-010e-73dc-5df2-0000c9252eca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/i","pattern":"[url:value = 'http://42.178.26.93:60244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086b3802-1c88-2545-dded-00003a0d95e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/bin.sh","pattern":"[url:value = 'http://182.116.113.119:44177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff044469-5d8b-096e-82e7-00002008fbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/i","pattern":"[url:value = 'http://175.148.29.181:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99766cf-c21a-54a2-ad06-000033495efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/i","pattern":"[url:value = 'http://112.255.6.104:51842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3208225a-48c2-ca15-5d3b-00003c3420e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.121.138.211:6609/linux","pattern":"[url:value = 'http://47.121.138.211:6609/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c868df9-2120-14e5-8ed7-0000c495cdee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.178.215:39984/i","pattern":"[url:value = 'http://182.121.178.215:39984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d671147-a86e-4084-de0a-000001ac094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/bin.sh","pattern":"[url:value = 'http://42.178.26.93:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0aa44dc-800b-2496-0caf-0000d2f349ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/bin.sh","pattern":"[url:value = 'http://61.54.194.76:45113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db8c08f-4391-ebed-0233-0000105ff5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.95.255.56:6610/linux","pattern":"[url:value = 'http://47.95.255.56:6610/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4b8422-d58f-5b73-dc9c-0000715e129d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/bin.sh","pattern":"[url:value = 'http://59.103.116.68:54641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15fa3dd-7a3d-b822-0dfd-00000fd94063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/bin.sh","pattern":"[url:value = 'http://78.178.118.193:47288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1dc53c1-da42-5c6b-9d5b-00007ae82940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/i","pattern":"[url:value = 'http://110.37.119.220:37643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae719a5d-72b3-6979-35b2-00003cbedbd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/i","pattern":"[url:value = 'http://78.178.118.193:47288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6956bf25-ccde-cc69-3ff9-00002ba5877a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dfb9efa-a2cc-32f4-17a1-000089883f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/lkxstress.sh","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfdca956-90e9-76fa-4dfd-00006ce78e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8e0829-c530-f430-bddd-000001331c62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d5f8ec-a379-7c95-7387-00007e5221d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d2c87a-711f-b229-e3de-0000c6ee46b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54c8c93-f2a9-67bf-e8d0-0000e37f993e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233e5c0e-298f-4363-10d9-000029876774","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b986e610-b1af-bdd8-a096-0000e4af9418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee9222-dc67-5c1a-841d-0000cb7af049","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46edbb0-8ae0-a704-b848-0000f9eeebe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5aad2c6-bebb-c710-72ae-0000e45942c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a5c6093-7456-72e2-5568-00000c033525","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4078140f-1aa5-daf3-7662-00008f5a2c88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13c39e7-3fd4-2a8d-c893-000079307217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf0d0ba-f4ec-4d3d-38bf-0000003a0986","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/bin.sh","pattern":"[url:value = 'http://175.149.65.165:37215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da404bc-a9a3-1765-5ffe-00008de5e062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/lkxstress.sh","pattern":"[url:value = 'http://170.205.31.25/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee491a25-6c92-a143-54ba-000075ddc2a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.i686","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38dd94ed-03e0-0254-ee4b-0000b803e712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mips","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e6345-6e8a-4065-1777-000010213f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba2bec7-cde3-2e4f-153d-000022088402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eae2ad7-3079-fe26-4b88-000022b524f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c835828-7717-4724-801f-0000c4fb571c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca58e51-a046-cc2b-97f1-00009ab4e367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02abef7d-8de1-1c39-21cd-000030bd2bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017c8112-ab48-d183-db17-000090ffa6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0f5224-d1a2-d631-c6c8-0000d3008958","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceb0dc-dd24-0d3c-b473-0000e8fcc8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91607d0-5c6c-effe-c495-0000c26a53c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f1a03b-c88c-5658-69d1-0000b8f531c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f62dee95-87a4-0b87-674f-00008a8cbd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ccb890c-3cec-922a-85f9-00001b9b84ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/bin.sh","pattern":"[url:value = 'http://210.208.110.221:38824/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a22e36-2df6-097d-d1a8-0000e74f17f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.61:48371/i","pattern":"[url:value = 'http://120.84.212.61:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922b9669-4a34-83a9-f7d3-000038d7614f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/i","pattern":"[url:value = 'http://175.149.65.165:37215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf93491-930d-398f-8dab-000077ec2eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.30.11:33676/i","pattern":"[url:value = 'http://125.42.30.11:33676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a63f62b-5b33-c0ca-4d82-000056339a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/i","pattern":"[url:value = 'http://210.208.110.221:38824/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f3076e-a0a0-cc02-ad10-0000ddca96e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/bin.sh","pattern":"[url:value = 'http://61.54.205.42:41895/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e5cca2-e16a-d3aa-b57f-000099a542ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.48.165:35638/i","pattern":"[url:value = 'http://182.116.48.165:35638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9f2981-43f3-57d1-4cd7-0000307725fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/i","pattern":"[url:value = 'http://61.54.205.42:41895/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebd6a855-fb21-9770-8221-0000976fe81e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/bin.sh","pattern":"[url:value = 'http://42.226.237.118:47311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59efd8b3-88b7-b4ce-49f2-00004a3ab540","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/i","pattern":"[url:value = 'http://42.226.237.118:47311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306715a3-a3c0-676a-d7b7-0000cb2bb448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/i","pattern":"[url:value = 'http://112.248.106.46:52448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a70bd27-724e-21af-7f5a-0000c81ab438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9fe27c-9696-a2ae-c4c9-0000a565cbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip","pattern":"[url:value = 'https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7c42d6-f0c6-ab0a-c15d-0000e68e1cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/4E_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/4E_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd3eae0-c8a2-cc27-c26f-0000e6df0d19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar","pattern":"[url:value = 'https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4421b41f-a239-ea1b-77bb-00002fccda45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Radium_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Radium_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a692c6c2-4c2c-cde0-2aa7-0000e5fc8586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd78c91-467d-7828-b1db-000087260752","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/krypton.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/krypton.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ec4ed0-383f-58c8-f510-0000beb9bc81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi","pattern":"[url:value = 'https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2251067f-2388-f479-b895-0000e1edac05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.148.24:8081/lol","pattern":"[url:value = 'http://176.65.148.24:8081/lol']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49820e7-b658-5410-2ca6-0000338bbceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/bin.sh","pattern":"[url:value = 'http://175.167.254.183:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7aa20-2876-5487-3d41-0000d061619b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:55129/bin.sh","pattern":"[url:value = 'http://118.232.137.101:55129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b2e10d-7ca2-26ae-6258-00009ea4c621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/bin.sh","pattern":"[url:value = 'http://36.48.41.248:36948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae02836b-af0f-1a48-bdbd-00004e54cb65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/i","pattern":"[url:value = 'http://175.167.254.183:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0a7018-6631-65ba-ae97-000029a92711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/bin.sh","pattern":"[url:value = 'http://121.231.139.26:36392/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--947e0b62-9248-f93b-1d23-0000eb6cdf84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/bin.sh","pattern":"[url:value = 'http://112.255.6.104:51842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb034404-9660-7b16-2868-0000fe633622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/bin.sh","pattern":"[url:value = 'http://61.52.118.142:40829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622ba13a-7032-712d-4033-0000c62a5162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/i","pattern":"[url:value = 'http://61.52.118.142:40829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b158945e-1677-5010-0c6a-0000e2c9d07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/bin.sh","pattern":"[url:value = 'http://42.230.24.112:44963/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2169560e-987e-f420-cf70-000026674bab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/bin.sh","pattern":"[url:value = 'http://115.55.150.155:57147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797f53ae-6ee8-195a-4d56-000076bc5787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/i","pattern":"[url:value = 'http://115.55.150.155:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9a690a-7ae4-7c85-67af-00005d046a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/bin.sh","pattern":"[url:value = 'http://111.127.232.172:44915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd84a120-6b8b-265f-6fcc-000091f2c902","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/bin.sh","pattern":"[url:value = 'http://210.208.111.36:51347/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1949b58-59df-5ef7-7c14-0000f30e3eeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/i","pattern":"[url:value = 'http://123.13.106.196:55036/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95cbe069-4590-f495-7599-0000e1b85d40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/bin.sh","pattern":"[url:value = 'http://115.197.132.72:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e32b50-ba60-6371-4baa-0000d7b92571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/i","pattern":"[url:value = 'http://210.208.111.36:51347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4349cd-abd7-e536-32ba-0000a36fa4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/bin.sh","pattern":"[url:value = 'http://123.12.230.16:46574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8884ef9-0a92-2a71-897f-0000c3fa64d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/i","pattern":"[url:value = 'http://123.12.230.16:46574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca07ec6-758f-98df-00e7-0000063e58a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/i","pattern":"[url:value = 'http://123.10.145.33:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d4d40-50cc-a0de-3209-0000ef8ff416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/i","pattern":"[url:value = 'http://110.36.11.225:51361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ff112f-1973-38a9-8d48-0000b9bc884d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mipsel","pattern":"[url:value = 'http://109.248.160.75/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a25a51-75d5-e6f0-227d-0000e1847613","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d510662-9a1e-248e-63d3-0000f5139c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mips","pattern":"[url:value = 'http://109.248.160.75/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45b34be-9ca7-c18b-e56b-00007c25edeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/bbc","pattern":"[url:value = 'http://109.248.160.75/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27277df2-2e6e-c549-9aa3-00007dad50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm5","pattern":"[url:value = 'http://109.248.160.75/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e990b48-d5bf-af62-a9a6-0000e0d86b73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86_64","pattern":"[url:value = 'http://109.248.160.75/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2e2c48-2bbc-4d6d-0f0d-00006f18ff09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm6","pattern":"[url:value = 'http://109.248.160.75/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9291cde-8ca3-82ba-60e2-0000d7a4986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm7","pattern":"[url:value = 'http://109.248.160.75/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8e9f6e-deb3-449a-613a-00004ae69bb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86","pattern":"[url:value = 'http://109.248.160.75/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1162131b-f13f-5933-9b63-0000265648c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_aarch64","pattern":"[url:value = 'http://109.248.160.75/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d73fcf-cf3d-a577-6354-00002eecf9dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_powerpc","pattern":"[url:value = 'http://109.248.160.75/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50204d64-55a8-81ae-cea6-0000c5113782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm4","pattern":"[url:value = 'http://109.248.160.75/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9270af4-47d2-e439-7810-0000195ec3fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/i","pattern":"[url:value = 'http://111.127.232.172:44915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460a383-1cfa-7e46-2fb7-0000df9d6e31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/i","pattern":"[url:value = 'http://130.12.209.147:55609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71aad826-383d-4ed9-5dc3-0000b7547a6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/bin.sh","pattern":"[url:value = 'http://123.12.244.28:44252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--052d0565-40b4-7431-dac4-000082c2e450","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/bin.sh","pattern":"[url:value = 'http://222.140.176.80:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4203f1a-e03c-6495-046e-000086776938","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/i","pattern":"[url:value = 'http://42.235.79.41:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90c2296-8daa-caa6-50c1-0000a3ec8b2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://143.246.195.33:48973/systemdd","pattern":"[url:value = 'https://143.246.195.33:48973/systemdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7e6e2c-a539-1c15-1e30-000089e2e017","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/i","pattern":"[url:value = 'http://222.140.176.80:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b464da6d-4ee3-ad36-f127-0000857195bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/i","pattern":"[url:value = 'http://123.12.244.28:44252/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd50d46-a76f-6470-9ced-0000c376ece6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/bin.sh","pattern":"[url:value = 'http://221.15.186.19:46271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551cdc2c-7a12-e171-e54c-0000fcad2c23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/i","pattern":"[url:value = 'http://221.15.186.19:46271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6d4d8c-ce4d-0393-6c5d-00006a8d8b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/i","pattern":"[url:value = 'http://175.151.82.88:52513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e0cf2-63af-338a-7caa-00004489e1bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.152.237:50318/i","pattern":"[url:value = 'http://115.55.152.237:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4293f644-ee2f-228f-8a31-0000a805e435","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/bin.sh","pattern":"[url:value = 'http://123.5.150.18:40732/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a29db3-c713-c2df-972a-0000cf5933fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/bin.sh","pattern":"[url:value = 'http://103.31.103.204:36161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f13b653-7af5-e5a3-12d7-0000acad9db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.46:39695/bin.sh","pattern":"[url:value = 'http://39.90.145.46:39695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10452def-a599-ca7c-bd0c-000070543dd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.91.33:34772/i","pattern":"[url:value = 'http://110.36.91.33:34772/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf5f310-4708-81c1-f810-00001a16520f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/i","pattern":"[url:value = 'http://105.225.133.213:37257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b728e10-8a41-b530-9737-0000f35b4310","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.11:59440/i","pattern":"[url:value = 'http://61.52.217.11:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e8db8-bbe9-1ae1-6c54-00001b1c40a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/bin/support.client.exe","pattern":"[url:value = 'https://37.77.150.120/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a1aa40-7334-dd32-b88c-000071d50f17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/update.ps1","pattern":"[url:value = 'http://45.141.119.82/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e74e0c-5685-d50e-61c6-0000adf8a91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/setup.exe","pattern":"[url:value = 'http://45.141.119.82/setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b2f821-5a3b-e940-c7d5-000034f3d02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--069f13f2-9581-ae7b-f411-000043692d51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/bin.sh","pattern":"[url:value = 'http://113.221.9.116:54492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e34963-cd80-5610-a4b3-0000a65f7791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/i","pattern":"[url:value = 'http://113.221.9.116:54492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc62826e-97e8-5d6d-f300-00001c365985","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/bin.sh","pattern":"[url:value = 'http://36.69.66.139:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9537c747-eb9c-1218-0e03-0000bda53af8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/i","pattern":"[url:value = 'http://61.53.220.232:55420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc43fc3-242f-5078-5139-0000a34841ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/i","pattern":"[url:value = 'http://115.62.148.107:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55dca9cb-ac5b-2ed7-f8c8-0000992ca505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/bin.sh","pattern":"[url:value = 'http://42.239.150.240:43603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9393a05-4e75-4d44-b4cd-00008811d18d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/bin.sh","pattern":"[url:value = 'http://103.249.199.3:49338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0ddfff-2617-824f-0494-000032ffd4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/i","pattern":"[url:value = 'http://103.249.199.3:49338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6909ddf9-d631-ce98-ff26-000003290e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/i","pattern":"[url:value = 'http://36.69.66.139:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9efd1d8-9541-b5bb-aab4-0000df7a2a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/bin.sh","pattern":"[url:value = 'http://123.188.44.167:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263ab5be-66af-585c-5277-0000640815dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/i","pattern":"[url:value = 'http://123.188.44.167:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740f7a7b-4d62-1126-8cae-0000e9bd4e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/bin.sh","pattern":"[url:value = 'http://110.39.230.1:53552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1059c34-1064-988d-87b4-00007a8a399a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/i","pattern":"[url:value = 'http://110.39.230.1:53552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42173fdd-6ddb-1087-e76f-0000aa2a4c74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/i","pattern":"[url:value = 'http://110.37.43.119:55539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a90b20-a8d8-1e4c-ecb5-000080c5c101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/i","pattern":"[url:value = 'http://42.239.150.240:43603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59723473-be9d-4695-d45e-0000a7e07019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.192.190:48972/i","pattern":"[url:value = 'http://60.23.192.190:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2335cd-fd51-947f-71a0-00006d57f3e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/bin.sh","pattern":"[url:value = 'http://115.55.218.67:53176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e093e97f-2657-5bf1-c1d9-00004d61e078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/bin.sh","pattern":"[url:value = 'http://115.202.187.105:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f10dbf-acb8-ea17-63bc-0000456040e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87bb5810-d511-93bb-8faa-0000c6815b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/bin.sh","pattern":"[url:value = 'http://182.121.9.194:56154/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abfa63f-ad14-8679-63b6-000078c252fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/bin.sh","pattern":"[url:value = 'http://110.37.61.166:59222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4b0e7c-fc60-ac5e-0c9b-0000d6106183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/i","pattern":"[url:value = 'http://110.37.61.166:59222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4275fa48-e012-7de3-8179-000044c31510","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/i","pattern":"[url:value = 'http://182.121.9.194:56154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47493451-83d0-13b8-5e5d-00002d220bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/bin.sh","pattern":"[url:value = 'http://203.101.187.5:58359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a7581-2774-d174-cdce-0000f61921b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/i","pattern":"[url:value = 'http://203.101.187.5:58359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ce6c9b-8cc4-eef3-b381-0000b0a4d947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/i","pattern":"[url:value = 'http://115.202.187.105:58599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27fa877-f24a-9f89-3346-000003ac6195","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.26.181:34146/bin.sh","pattern":"[url:value = 'http://175.175.26.181:34146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d9628c7-905c-bd30-dd5d-000024a75dbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm6","pattern":"[url:value = 'http://85.11.167.197/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1889e20a-1f6b-00b9-c816-000001cd6a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mipsel","pattern":"[url:value = 'http://85.11.167.197/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c420f58-670d-c8db-ef5f-0000899306e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/ppc","pattern":"[url:value = 'http://85.11.167.197/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a911851-26de-a16d-b75c-00009c1b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm7","pattern":"[url:value = 'http://85.11.167.197/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c5363b-4264-4515-a28f-0000be5ae877","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/m68k","pattern":"[url:value = 'http://85.11.167.197/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee902ed-8bc4-919c-12f5-0000beac3ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mips","pattern":"[url:value = 'http://85.11.167.197/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4910ed0f-5abd-14e4-c759-0000094d9f1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/sh4","pattern":"[url:value = 'http://85.11.167.197/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39849eb-b54e-beed-a57c-00008eae9536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm4","pattern":"[url:value = 'http://85.11.167.197/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8c9c29-f9af-fa77-ce39-0000fa1032b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pm68k","pattern":"[url:value = 'http://194.26.192.173/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b71cc0f-663e-b874-e7fb-0000bf67dbf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/px86","pattern":"[url:value = 'http://194.26.192.173/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84df82d5-b18e-71cd-a945-000060ed877d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm6","pattern":"[url:value = 'http://194.26.192.173/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea97b03-f21a-2829-8425-000095f140e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm","pattern":"[url:value = 'http://194.26.192.173/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8b243-8e6b-8054-d9d6-0000d851e018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm7","pattern":"[url:value = 'http://194.26.192.173/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4233a2-54ad-03f7-b611-0000423389c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/x86_64","pattern":"[url:value = 'http://194.26.192.173/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92726e36-f554-e412-7958-000091e58a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pmpsl","pattern":"[url:value = 'http://194.26.192.173/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4854398-9892-4067-eeac-000041f0c72b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pspc","pattern":"[url:value = 'http://194.26.192.173/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3911f96-63ae-e35a-b410-000047ba2c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/psh4","pattern":"[url:value = 'http://194.26.192.173/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9745f3bc-8203-158e-8bd8-00000115452c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/i","pattern":"[url:value = 'http://115.55.218.67:53176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71020d31-d577-fb56-6087-00008a7fd519","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/bin.sh","pattern":"[url:value = 'http://110.36.25.33:45137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc98e404-afef-969c-44f1-000037b9c010","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/i","pattern":"[url:value = 'http://110.36.25.33:45137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3de9b7-fef3-ea1b-4b4d-0000e3b3a970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:40215/i","pattern":"[url:value = 'http://120.28.193.113:40215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d5f4d9-b5ab-0cfc-a850-0000f047498a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.187.39.131:39653/i","pattern":"[url:value = 'http://2.187.39.131:39653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08f569b-0665-7fd3-c8ea-000094d6766c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/i","pattern":"[url:value = 'http://42.230.41.97:51870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18510372-5483-e6b2-d706-00009442cb29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/bin.sh","pattern":"[url:value = 'http://36.69.86.82:33719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955fd729-9823-4030-9ee2-0000f64727e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.7.221.147:56994/i","pattern":"[url:value = 'http://123.7.221.147:56994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83550919-6cfd-cbb7-e0f7-00002d42c3e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/bin.sh","pattern":"[url:value = 'http://42.235.79.41:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21240cf-8916-b688-36f0-00006d45aa4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/i","pattern":"[url:value = 'http://123.12.234.37:36560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e0bbe6-03ef-2358-f6ae-0000fe227ca7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/i","pattern":"[url:value = 'http://36.69.86.82:33719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e322413-2389-2475-e56f-0000d329e8df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/bin.sh","pattern":"[url:value = 'http://103.146.110.122:34125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6adfcceb-70cb-f470-3f55-000020e22d82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/bin.sh","pattern":"[url:value = 'http://112.238.178.200:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60ae0b-3f51-a70d-4cd1-000085155a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/i","pattern":"[url:value = 'http://112.238.178.200:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c281c-0a04-c86f-ba70-0000f8139c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.98.147.69:54271/bin.sh","pattern":"[url:value = 'http://115.98.147.69:54271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521512f5-6c9b-e043-8501-0000525060ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/i","pattern":"[url:value = 'http://103.146.110.122:34125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d155dcb3-454c-86c8-0570-000005e22a5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7061144442/nxumfOe.exe","pattern":"[url:value = 'http://62.60.226.140/files/7061144442/nxumfOe.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73297b44-2f8a-e526-1ab5-00000d9c5890","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:45025/i","pattern":"[url:value = 'http://196.190.133.180:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c03ec0f-8706-b7af-c462-000094e8efc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/i","pattern":"[url:value = 'http://125.43.107.232:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0f6add-8ed3-2dc2-e0fe-00007e8a7dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/bin.sh","pattern":"[url:value = 'http://175.165.87.184:46171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a62dbe5-0576-8f3d-2ba4-00009a2f4b1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/bin.sh","pattern":"[url:value = 'http://123.13.142.66:59668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd0cd72-1be7-5665-821c-00005b84825a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/i","pattern":"[url:value = 'http://219.157.202.104:39615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287971a6-a5f6-c4ab-e99e-0000367ee57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/i","pattern":"[url:value = 'http://175.165.87.184:46171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b138978-f6eb-21ca-94b8-0000c06b1ef1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/bin.sh","pattern":"[url:value = 'http://123.10.145.33:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f15e070-7466-e620-a979-000093243ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/bin.sh","pattern":"[url:value = 'http://182.123.40.234:41791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--022fa51a-9a98-0606-56bd-00009d6616ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/bin.sh","pattern":"[url:value = 'http://119.179.237.64:40459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83224bd-d2ca-963d-93fd-000000cf9873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/i","pattern":"[url:value = 'http://123.13.142.66:59668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66dcf73f-0407-5efd-6fb4-00000fd90ee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/bin.sh","pattern":"[url:value = 'http://222.140.161.119:54327/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae837782-762f-cc76-15e7-00000208b745","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/i","pattern":"[url:value = 'http://123.14.193.241:34414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4f2eeb-6881-96f4-1b28-0000bca52f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/bin.sh","pattern":"[url:value = 'http://123.13.106.196:55036/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e346e63f-5616-2722-e844-00004cda572f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/bin.sh","pattern":"[url:value = 'http://219.157.202.104:39615/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dbed55e-4ad6-5f1d-7f60-000042c2e9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/bin.sh","pattern":"[url:value = 'http://110.36.13.229:41730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360d6703-9bcb-5264-630d-0000a23d7a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/i","pattern":"[url:value = 'http://42.234.166.234:40751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37adc380-4994-a87d-6439-00005df305c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/i","pattern":"[url:value = 'http://119.179.237.64:40459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe3c6e-06e5-4832-83b8-00009fc90532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/i","pattern":"[url:value = 'http://110.36.13.229:41730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e5d3d1-6dd4-a72e-a803-000002489a66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.252.196.44:41579/i","pattern":"[url:value = 'http://112.252.196.44:41579/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb35d5e-9e7f-51ba-0233-0000cf298724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ea9eb6-3d48-8c05-979e-00009ab86b9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/bin.sh","pattern":"[url:value = 'http://36.71.24.56:48673/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0410252b-7c09-6a79-5ed9-0000352a2c28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/bin.sh","pattern":"[url:value = 'http://182.113.206.76:59535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6083d4e8-48c9-2478-0775-0000c2621657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/bin.sh","pattern":"[url:value = 'http://110.37.39.88:32921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58bf902-8566-ef45-254c-000048e69129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/i","pattern":"[url:value = 'http://36.71.24.56:48673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d8dec4-d40f-ed16-b611-0000f563c9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/bin.sh","pattern":"[url:value = 'http://115.48.44.116:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b426959-9f20-f3f1-a2b4-0000bbf6a058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/i","pattern":"[url:value = 'http://182.113.206.76:59535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede9c7de-479d-4a14-503c-00002e0c462c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/bin.sh","pattern":"[url:value = 'http://110.36.70.189:53510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde65836-304f-ddf6-5481-0000ef9b4c20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/bin.sh","pattern":"[url:value = 'http://110.37.89.210:38147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a990e2-c75e-e95c-f2dc-0000805bd085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/i","pattern":"[url:value = 'http://110.37.39.88:32921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fafa69-e04f-d62c-345e-0000004ba761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.181.201:51235/bin.sh","pattern":"[url:value = 'http://222.138.181.201:51235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a240dc8a-f93c-bb6b-9dba-0000438510d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/i","pattern":"[url:value = 'http://110.36.70.189:53510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12177447-75e3-3680-1b48-00004923e7cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/bin.sh","pattern":"[url:value = 'http://42.232.231.254:56762/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab9b57f-f3e7-7729-ec5f-000080d43b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/i","pattern":"[url:value = 'http://115.48.44.116:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7b8d1b-c852-b9e3-0593-0000adff4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/i","pattern":"[url:value = 'http://110.37.89.210:38147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719635a4-2349-98e9-84d7-0000915a44a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/i","pattern":"[url:value = 'http://42.235.75.164:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e33271-f724-6c02-ff1d-00007536a083","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/i","pattern":"[url:value = 'http://222.140.161.119:54327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aca6b0-67c1-6d8e-b9a8-000016154f30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/bin.sh","pattern":"[url:value = 'http://175.153.92.244:48563/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1530046-3f6f-cf7a-27d7-00007203b443","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/i","pattern":"[url:value = 'http://125.44.47.23:54371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9c0f0e-3bbc-86ee-6f46-000080c9ab3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/bin.sh","pattern":"[url:value = 'http://182.117.165.9:33305/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14575b1e-2a8e-af01-0d83-00004e8e8b08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/i","pattern":"[url:value = 'http://42.232.231.254:56762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacde5cb-5116-ae1d-9003-0000af508511","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/bin.sh","pattern":"[url:value = 'http://61.53.220.232:55420/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3ee397-fd8e-591b-a254-0000b8185600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/i","pattern":"[url:value = 'http://175.153.92.244:48563/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f623911c-597e-a6df-6ea2-00002b77d565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/i","pattern":"[url:value = 'http://39.77.172.60:34449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d06a61d-928e-d76e-02e5-0000f1b6cbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/bin.sh","pattern":"[url:value = 'http://42.232.100.206:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a50bfe6-f682-5fc2-cd02-0000512f0a05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/i","pattern":"[url:value = 'http://42.232.100.206:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f21768-964f-aa8b-1774-0000e482c823","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/bin.sh","pattern":"[url:value = 'http://110.36.18.60:52528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a70d13-d603-2442-2f8c-0000170a1044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips","pattern":"[url:value = 'http://160.191.242.92/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0384ccc6-8846-cffc-2366-0000ecce7024","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33104e87-3c42-f391-1eb1-000063413a77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm7","pattern":"[url:value = 'http://160.191.242.92/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75fba481-2045-849f-fd95-0000f4856615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d57a165-3541-0541-f863-0000f87905a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x64","pattern":"[url:value = 'http://160.191.242.92/x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--898b39c5-20d0-1160-be44-000017fcc69e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_m68k","pattern":"[url:value = 'http://160.191.242.92/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65d9bb92-41c4-fb71-d885-0000f2df3456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4734e723-55a7-a1de-408f-0000fef62cce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm5","pattern":"[url:value = 'http://160.191.242.92/pid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347a4868-f49b-1bef-68e7-00003ac2822d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ae34c6-666c-4929-ccf0-0000eb10d270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86","pattern":"[url:value = 'http://160.191.242.92/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39859b9e-afee-f845-de9e-00000c9cf413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm8","pattern":"[url:value = 'http://160.191.242.92/pid.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d8ece9-e35b-0d50-e335-000028864804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.i686","pattern":"[url:value = 'http://160.191.242.92/skid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb6f522-df56-440c-a1cb-00008476d47e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4eb","pattern":"[url:value = 'http://160.191.242.92/sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8134789d-a307-04f1-d6f3-0000c7ef69c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm7","pattern":"[url:value = 'http://160.191.242.92/skid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d82739-a930-0c0b-e4bf-00008d017354","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm6","pattern":"[url:value = 'http://160.191.242.92/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c4450-490b-57e7-e30b-000023b09da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.sh4","pattern":"[url:value = 'http://160.191.242.92/skid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff4350f-2e7c-1d42-cc5e-0000e7cbf6ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0660e55f-17c2-14e4-d5b1-0000fd2d4ad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c363fbf-faf3-8dd0-99d9-0000ad10433a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86_64","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--191c0508-7b21-ab32-419e-00009313bc05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_ppc","pattern":"[url:value = 'http://160.191.242.92/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fcc911e-89fe-2683-d3b9-00001846fe3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4eb","pattern":"[url:value = 'http://160.191.242.92/pid.sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070b8f95-04aa-4126-4806-0000246762be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mpsl","pattern":"[url:value = 'http://160.191.242.92/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3562cef2-ed43-55ad-f4b9-0000b4f31891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sora.x86","pattern":"[url:value = 'http://160.191.242.92/sora.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a37bed-61eb-db25-199b-0000d6585492","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mips","pattern":"[url:value = 'http://160.191.242.92/vlxx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7a94cb-8edb-09a6-2b03-0000cc71ebfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.2.112:41839/i","pattern":"[url:value = 'http://123.13.2.112:41839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e128c6-80a2-0b6a-d077-0000eb04d359","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/payload.xml","pattern":"[url:value = 'http://160.191.242.92/payload.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b1e016-73d1-9cbb-19e7-00000ec5ea3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ipmiv2.xml","pattern":"[url:value = 'http://160.191.242.92/ipmiv2.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1c8d45-38ce-d296-6481-0000180bb011","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ruck","pattern":"[url:value = 'http://160.191.242.92/ruck']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa82002-848f-f969-b848-0000ba7b9e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/riscv64","pattern":"[url:value = 'http://160.191.242.92/riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622e6250-eddf-177d-e6a7-000013d76f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/spc","pattern":"[url:value = 'http://160.191.242.92/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6127b-6834-c0a0-6de1-0000bb96c586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.i686","pattern":"[url:value = 'http://160.191.242.92/pid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74db6151-aa9c-4495-8860-0000f4ef50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm7","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63398dbe-9316-e56a-1f19-0000ea9ef8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.amd64","pattern":"[url:value = 'http://160.191.242.92/skid.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f9304-8558-0e3e-f105-000052c77897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armeb","pattern":"[url:value = 'http://160.191.242.92/armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6492f1f8-12d9-bc14-ab61-00005c074536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm64","pattern":"[url:value = 'http://160.191.242.92/skid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644dc794-63fb-0cfd-6657-000082ba2942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i686","pattern":"[url:value = 'http://160.191.242.92/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa0af22-8c8f-2a3d-495e-000030f6d411","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/powerpc","pattern":"[url:value = 'http://160.191.242.92/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef57d8a-8c8a-3c77-90cc-00004f92da2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/m68k","pattern":"[url:value = 'http://160.191.242.92/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe9eb5-ff67-b504-4005-0000f4f84021","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f12fad2-02e4-ea28-d97f-00006791dc90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86_64","pattern":"[url:value = 'http://160.191.242.92/skid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6925f738-9955-370d-a282-0000cef752d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.armeb","pattern":"[url:value = 'http://160.191.242.92/pid.armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--293fe3bc-71a6-ae05-b480-0000fb07cfe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86_64","pattern":"[url:value = 'http://160.191.242.92/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d864e0f9-4ea4-6e48-ef59-00005ac25b84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7n","pattern":"[url:value = 'http://160.191.242.92/arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93a860f-5c36-b254-836a-000054ffe445","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b4f903-1cdb-fe49-c4c6-0000ff42d676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar5","pattern":"[url:value = 'http://160.191.242.92/skid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e1df07-532d-8d18-2f6e-0000209458cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.sh4","pattern":"[url:value = 'http://160.191.242.92/vlxx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17683ca-3bdb-f6ac-8673-0000c1864968","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm","pattern":"[url:value = 'http://160.191.242.92/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7980ae-e73f-4426-c84a-000035ca642a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/t","pattern":"[url:value = 'http://160.191.242.92/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4119db-ba31-8fed-1a08-0000ef7147fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489eed4c-daa2-708b-77c6-0000719102a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv7l","pattern":"[url:value = 'http://160.191.242.92/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a66376-5121-7779-3b5a-0000d56f6fe4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm6","pattern":"[url:value = 'http://160.191.242.92/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d429cb3-2389-a8e8-70f5-00007648e030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--559cce64-a8af-2f9e-9d5d-0000176803a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.powerpc","pattern":"[url:value = 'http://160.191.242.92/skid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4128aa3f-7653-1472-cc9f-0000ba1c1bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc","pattern":"[url:value = 'http://160.191.242.92/pid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d6ea607-d334-c9cd-7310-0000a36e0456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ppc","pattern":"[url:value = 'http://160.191.242.92/skid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ac6b03-0231-0d9e-8d26-0000af59a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/av.sh","pattern":"[url:value = 'http://160.191.242.92/av.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03dc51c7-5118-eb49-dedf-00004c533782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm6","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1583f6-194b-619d-3794-0000384c6504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/aarch64","pattern":"[url:value = 'http://160.191.242.92/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549a4467-0740-c7fe-804f-00003d216804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips.orig","pattern":"[url:value = 'http://160.191.242.92/main_mips.orig']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3a19b1-c876-b1ca-6662-00006de6a14c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm5","pattern":"[url:value = 'http://160.191.242.92/skid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80010c9e-5448-1df4-5527-0000d849af4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37bfebf-09c2-4ce5-212e-0000779c98e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/zero.mips","pattern":"[url:value = 'http://160.191.242.92/zero.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316ea865-a925-a8dc-75e6-000076be36ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3274e0b5-9d07-e3f7-5cbf-00003ef53fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mipsel","pattern":"[url:value = 'http://160.191.242.92/skid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bbd2b7-1931-fb3c-c001-0000dbda60f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar6","pattern":"[url:value = 'http://160.191.242.92/ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8025acb-39cf-d03f-5981-0000c7d6e855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm","pattern":"[url:value = 'http://160.191.242.92/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f17ea-5921-81fb-1cd3-0000fe51a954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/k.sh","pattern":"[url:value = 'http://160.191.242.92/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd88ba46-43fe-b7af-7dd1-00007d28f901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/wget.sh","pattern":"[url:value = 'http://160.191.242.92/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd77b99-12e9-19a9-6ddc-0000d2c821b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///mpsl","pattern":"[url:value = 'http://160.191.242.92///mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ac56dd-e21b-684f-fc01-000042a6f65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc64","pattern":"[url:value = 'http://160.191.242.92/pid.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f45d5ef-f957-e3ce-4448-0000ac315609","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenkins.py","pattern":"[url:value = 'http://160.191.242.92/jenkins.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6068dc09-2247-53f0-cd86-000095431d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ppc","pattern":"[url:value = 'http://160.191.242.92/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b787277-75dc-26c2-b86d-0000e61fd91a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massload","pattern":"[url:value = 'http://160.191.242.92/massload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ab619e-2f37-694c-a1e7-00003e19f030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mips","pattern":"[url:value = 'http://160.191.242.92///main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6d6dd2-a4d6-368a-4142-0000992bac61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0129e2b0-530d-6266-27be-00001fd2b2bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.aarch64","pattern":"[url:value = 'http://160.191.242.92/skid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3db699-3111-a547-ab05-0000ec438320","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm6","pattern":"[url:value = 'http://160.191.242.92/pid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf2f53b-b760-3919-cf9b-0000e630c9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f4f3b-493d-c99b-e972-0000d6ae8248","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.m68k","pattern":"[url:value = 'http://160.191.242.92/vlxx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89422cfd-aa01-d7e5-d8f7-0000e889eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm","pattern":"[url:value = 'http://160.191.242.92/pid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660b79cd-e4eb-7f8f-b0a1-0000042e5bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i586","pattern":"[url:value = 'http://160.191.242.92/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c913fa-db41-8600-e122-0000cf728849","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i486","pattern":"[url:value = 'http://160.191.242.92/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33623e6-b9f3-1302-08d0-0000280a0bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6286057f-9ee6-af1a-8eec-0000d277b8f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i386","pattern":"[url:value = 'http://160.191.242.92/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7a6d19-b680-d30a-3945-0000870250f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar","pattern":"[url:value = 'http://160.191.242.92/skid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5107ecb0-6466-2b91-0d5b-00005d8792ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3229db90-3e54-e20d-ea61-0000291b79d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.aarch64","pattern":"[url:value = 'http://160.191.242.92/vlxx.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c68c43e6-55db-9301-c95e-000066433ab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afcba2f-b95a-f89a-1944-00006d46bc7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92396f32-417c-612a-ac44-00006ef98ba2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554c6221-d0df-a7fa-9118-0000e5586db2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mips","pattern":"[url:value = 'http://160.191.242.92/skid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aefeee6-88b6-62f3-ef24-0000a951c85d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar","pattern":"[url:value = 'http://160.191.242.92/ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c953c2da-b990-70ba-7172-00007fc64003","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11df17af-c076-eabb-114e-000035bd1431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm7","pattern":"[url:value = 'http://160.191.242.92/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eba982f-5fec-4992-799d-0000554b1efd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar7","pattern":"[url:value = 'http://160.191.242.92/skid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5185dc0d-4202-59f2-9355-00004cf12b10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv6l","pattern":"[url:value = 'http://160.191.242.92/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850420c5-b86c-371f-613c-0000f1fbf13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm","pattern":"[url:value = 'http://160.191.242.92/skid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddaedc7-b8bf-cced-4349-0000ed40734d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86","pattern":"[url:value = 'http://160.191.242.92/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd17683-a276-a5de-8e32-00009fb4dcba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm5","pattern":"[url:value = 'http://160.191.242.92/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88af32cc-7f08-7164-15f5-0000c7dac00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm5","pattern":"[url:value = 'http://160.191.242.92/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99422cb4-d293-4595-936e-000097c258e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm64","pattern":"[url:value = 'http://160.191.242.92/bot_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a448105c-d834-c0d5-df9d-0000a315492d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_32","pattern":"[url:value = 'http://160.191.242.92/bot_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f37b9f46-a03f-84dd-da08-0000b16f8a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_aarch64","pattern":"[url:value = 'http://160.191.242.92/main_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857ff60c-5fc4-c84d-b5ef-00007f3096d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c3d34-5bc2-0ec5-1b4c-000092933c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40b0ec4-8979-df45-d9dd-00006b818f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/run_adb.sh","pattern":"[url:value = 'http://160.191.242.92/run_adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d9495c-1ba7-1030-b942-00004f640cf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mips","pattern":"[url:value = 'http://160.191.242.92/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0459f9db-92ba-b15c-ea30-0000a2632cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mipsel","pattern":"[url:value = 'http://160.191.242.92/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fc9417-0463-53f7-eec8-00004c390170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar7","pattern":"[url:value = 'http://160.191.242.92/pid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85a2753-355d-18fe-21eb-0000cbf7df00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bda8b9-aa58-1263-348f-0000edf77998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar6","pattern":"[url:value = 'http://160.191.242.92/skid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7075cbda-5f4f-7cd7-a542-00007c097e0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mpsl","pattern":"[url:value = 'http://160.191.242.92/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23bce221-3222-8a02-170e-000063660793","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar7","pattern":"[url:value = 'http://160.191.242.92/ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--196056f7-d21a-ef83-2b95-0000e5aebb68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.m68k","pattern":"[url:value = 'http://160.191.242.92/skid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9a9bf1-8b46-0a45-266c-0000c21f75ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86","pattern":"[url:value = 'http://160.191.242.92/pid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5007d-a933-1484-a645-00005ee6986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm5","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ee75f-89fa-92d1-d158-000013cd25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_sh4","pattern":"[url:value = 'http://160.191.242.92/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3f725c-2a44-feee-d80d-00003abfa419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f33b8eb-48b0-a481-7d2c-0000c20d3f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dc97c9-69af-3a31-04d8-0000db6d6a23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86","pattern":"[url:value = 'http://160.191.242.92/skid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6f4281-6e43-78cb-abc2-00000bc36578","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86_64","pattern":"[url:value = 'http://160.191.242.92/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e09ea4e8-8e01-5aeb-25a1-00008e5b03f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mpsl","pattern":"[url:value = 'http://160.191.242.92/skid.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7abb0d6e-84d5-75b0-279b-00005f22b7b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm64","pattern":"[url:value = 'http://160.191.242.92/pid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305c412c-b5e9-798f-62ba-00004e9e9981","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_64","pattern":"[url:value = 'http://160.191.242.92/bot_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1571bd24-4530-83c4-3fe4-0000bd5b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mpsl","pattern":"[url:value = 'http://160.191.242.92/vlxx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb33d50-8c7f-480a-5d94-0000a04ac13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.ppc","pattern":"[url:value = 'http://160.191.242.92/vlxx.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66a153e0-0a0c-607c-0f5b-00006dd30881","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7","pattern":"[url:value = 'http://160.191.242.92/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b5c7b9-9d8c-8979-905b-00000149865c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/xparm7","pattern":"[url:value = 'http://160.191.242.92/xparm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f633480b-837a-fe91-6cbe-00007f530ea2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm6","pattern":"[url:value = 'http://160.191.242.92/skid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b06ff38-de4f-fa7b-0e75-0000a449a9ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153a3e5e-f6cc-9ecd-922e-0000159d84ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4","pattern":"[url:value = 'http://160.191.242.92/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5779a757-56cc-7972-79c0-0000551a9e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mpsl","pattern":"[url:value = 'http://160.191.242.92///main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb2830d-cd8a-de18-6e2d-0000c96fcf18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar5","pattern":"[url:value = 'http://160.191.242.92/ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58851973-f15b-93ec-7958-0000a4134d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/adbload","pattern":"[url:value = 'http://160.191.242.92/adbload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542e732d-35b6-f654-e2ac-00001c27b7b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenload","pattern":"[url:value = 'http://160.191.242.92/jenload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f1184f-847a-8590-b5fd-0000c711d579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/dvrk","pattern":"[url:value = 'http://160.191.242.92/dvrk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46445693-7b34-b606-8551-000096733c1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.156:47216/i","pattern":"[url:value = 'http://110.36.13.156:47216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b071edb8-4360-d2d8-f625-0000f3e926bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/bin.sh","pattern":"[url:value = 'http://112.225.177.252:53050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027172f5-f5fa-cbdd-fc90-00007d72ae49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/i","pattern":"[url:value = 'http://112.225.177.252:53050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f465040-e7e8-06ee-9765-0000a1e87180","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/activemq","pattern":"[url:value = 'http://160.191.242.92/activemq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bdd882-3ab5-d35e-3a81-0000eaf60ace","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/bin.sh","pattern":"[url:value = 'http://117.26.226.42:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeba7a0b-cc6b-e119-4cb5-00000647610f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/bin.sh","pattern":"[url:value = 'http://105.186.82.28:41113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de5aed3-b42d-0fc0-a994-00009b5d492a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.141/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.141/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a364ea07-0a92-0e70-2c9b-00001f77edaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massloader_dvr.new","pattern":"[url:value = 'http://160.191.242.92/massloader_dvr.new']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52314986-c9e8-e4fd-c793-000061abd6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/bin.sh","pattern":"[url:value = 'http://175.43.119.226:38433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd7ad15-e14a-d9f3-ef58-0000ed85a11b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.137.203:37078/bin.sh","pattern":"[url:value = 'http://182.121.137.203:37078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408873a0-873d-4de2-aef7-0000ca7f39a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/cnc_new_x64","pattern":"[url:value = 'http://160.191.242.92/cnc_new_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ff2082-9b5e-447a-3340-0000ae414189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenbrute","pattern":"[url:value = 'http://160.191.242.92/jenbrute']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d460d90f-2aed-2e86-0a97-0000e2621d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/bin.sh","pattern":"[url:value = 'http://27.209.155.133:42828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16041bb1-63f0-74cb-2e06-00009eb1de1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcb6f5f-94ba-b8db-caff-00007d4540bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f58fcb7-b21d-a706-d9dd-0000e9deda63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/runme.sh","pattern":"[url:value = 'http://46.151.182.200/runme.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7210a6cc-142f-75c7-ace8-0000892921f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f76385-8a2c-1b53-19b7-00007e81c3ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://asegurar2026.duckdns.org/sostener2.vbs","pattern":"[url:value = 'http://asegurar2026.duckdns.org/sostener2.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff62abc-d52f-e12c-7c06-00000387d924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/Exodus.sh","pattern":"[url:value = 'http://94.154.43.26:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7924de12-6f9c-bf91-6962-0000c86c3e89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://141.11.100.247/fktn62.sh","pattern":"[url:value = 'http://141.11.100.247/fktn62.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5327886-b16e-e527-7140-00003eff8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip","pattern":"[url:value = 'https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e93dfc-4359-0e0c-db46-0000fb96dd91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db160b35-5312-b785-8e47-0000c1f60e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/i","pattern":"[url:value = 'http://175.43.119.226:38433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9cbbe10-dd15-466e-1878-00009ea07e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/i","pattern":"[url:value = 'http://125.45.148.93:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c23e94f-4597-a7dd-0392-0000a26bb6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/i","pattern":"[url:value = 'http://105.186.82.28:41113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93bd5623-017d-5b68-3e4d-0000974c8867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.112.68:46964/i","pattern":"[url:value = 'http://182.126.112.68:46964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd4bc331-952a-da51-ef92-0000d006d661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/i","pattern":"[url:value = 'http://110.36.18.60:52528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5051b3e7-ff76-0eba-09ab-00008b5f1fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/i","pattern":"[url:value = 'http://27.209.155.133:42828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dad79-a8a6-b8b6-fb4b-0000ec979841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/i","pattern":"[url:value = 'http://27.193.35.180:45367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2840d7ec-8454-74f0-3531-0000ec2b7e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/bin.sh","pattern":"[url:value = 'http://42.224.217.218:36543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65afd37f-7f04-6ffc-2f97-000047a74203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/i","pattern":"[url:value = 'http://125.44.43.60:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5d40c8-5d1f-4fee-3ba6-00008e69e027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm5","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ac160e-d434-f676-07be-00003d1032c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ce5ed","pattern":"[url:value = 'http://5.182.210.174/9ce5ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f7fd64-543c-e4e1-6f9b-00003963de94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f97e6f","pattern":"[url:value = 'http://5.182.210.174/f97e6f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0d5e52-148a-32a3-35dc-0000c1c7b36a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e6855","pattern":"[url:value = 'http://5.182.210.174/6e6855']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e7d967-b575-1a0c-6f64-0000d77a9190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2965f","pattern":"[url:value = 'http://5.182.210.174/d2965f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7412713c-2904-970b-98be-00001c9a60d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78dbc7","pattern":"[url:value = 'http://5.182.210.174/78dbc7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34b9737-296e-7f6b-29e2-00000a5c32ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/10d086","pattern":"[url:value = 'http://5.182.210.174/10d086']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b87dd1-93ae-5f38-b976-0000271626da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0df469","pattern":"[url:value = 'http://5.182.210.174/0df469']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4df4dd-4120-c8ef-4a97-0000099afa32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef75b2","pattern":"[url:value = 'http://5.182.210.174/ef75b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed33892-5261-d155-244a-000002a4162b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f6d64f","pattern":"[url:value = 'http://5.182.210.174/f6d64f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f563229d-9614-0c38-772c-000072b4183a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea7693","pattern":"[url:value = 'http://5.182.210.174/ea7693']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d21f4-30cd-8ed6-d6f2-0000b495f7e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ZTMe","pattern":"[url:value = 'http://129.121.110.105/ZTMe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d723904-cecc-9fa3-5739-000043f070d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f98144","pattern":"[url:value = 'http://5.182.210.174/f98144']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6fc3d-0189-09eb-f3f4-000012cbfa02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/af2ec4","pattern":"[url:value = 'http://5.182.210.174/af2ec4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26679570-5e54-a4a3-3f71-00007f67a77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e4138","pattern":"[url:value = 'http://5.182.210.174/0e4138']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5964da3a-5e4a-de31-80a7-0000ec82ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df5d68","pattern":"[url:value = 'http://5.182.210.174/df5d68']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a56e5e-2ce7-51ee-89e0-0000cf96579a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vJB","pattern":"[url:value = 'http://129.121.110.105/vJB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c0fa24-9005-3c01-1f5e-0000be056004","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VOgA","pattern":"[url:value = 'http://129.121.110.105/VOgA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf03943-6971-052e-86b9-00003593098d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d97f08","pattern":"[url:value = 'http://5.182.210.174/d97f08']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b00099-a972-ec23-f04e-0000cdd575e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3c14b4","pattern":"[url:value = 'http://5.182.210.174/3c14b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4616dd8-1cc4-8520-cb7d-00009d0a65b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/90e80a","pattern":"[url:value = 'http://5.182.210.174/90e80a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a9a90a-8f55-fc3a-ffdf-0000292edc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/660bc9","pattern":"[url:value = 'http://5.182.210.174/660bc9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29041e05-1622-c91b-6ebb-000021917caa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/839ec9","pattern":"[url:value = 'http://5.182.210.174/839ec9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62832652-43d2-b7de-2f0a-00002c21eeac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5d360","pattern":"[url:value = 'http://5.182.210.174/a5d360']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c5a9d1-ce57-c0c8-28b2-0000ecf62b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6b72d3","pattern":"[url:value = 'http://5.182.210.174/6b72d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd54f54-7dd0-6f9d-a964-00001e9bb6ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2bd33f","pattern":"[url:value = 'http://5.182.210.174/2bd33f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03df392-fefc-0c53-0381-00006d18d78f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/42736b","pattern":"[url:value = 'http://5.182.210.174/42736b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4fa57e-efd6-5f0c-6b21-00009f0a14a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/51f300","pattern":"[url:value = 'http://5.182.210.174/51f300']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359231c6-273e-2991-e0a5-0000b9085ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bed3aa","pattern":"[url:value = 'http://5.182.210.174/bed3aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79415c70-6d42-3544-2665-0000b7524ed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/db7b9c","pattern":"[url:value = 'http://5.182.210.174/db7b9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfadac9c-87b1-efc0-bfdd-0000aaaa2845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d4271","pattern":"[url:value = 'http://5.182.210.174/1d4271']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcce745-6696-51e0-1edc-000001cae15e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc89e2","pattern":"[url:value = 'http://5.182.210.174/cc89e2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfd9ad4-7faf-e85c-968b-0000365434af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/021219","pattern":"[url:value = 'http://5.182.210.174/021219']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2951d848-36ef-52ee-719e-0000df72b78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/824d82","pattern":"[url:value = 'http://5.182.210.174/824d82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56599372-59ae-bb70-7bbd-0000ebd8c94f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78887f","pattern":"[url:value = 'http://5.182.210.174/78887f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aa043dd-cb2f-c4bd-26ea-00007ca55c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9c504a","pattern":"[url:value = 'http://5.182.210.174/9c504a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--566b6290-6718-1746-ea49-000084ce4cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9f15f6","pattern":"[url:value = 'http://5.182.210.174/9f15f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348f4cc-7969-f213-d2ee-00006414c7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/JPO","pattern":"[url:value = 'http://129.121.110.105/JPO']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73505b0-a7f3-9dfb-1595-00001aec8b2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/57980e","pattern":"[url:value = 'http://5.182.210.174/57980e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1173dffe-30f0-9116-8a01-00008480e233","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/69e697","pattern":"[url:value = 'http://5.182.210.174/69e697']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7410f74b-0a7e-0a44-b1e1-0000cef340e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a82d92","pattern":"[url:value = 'http://5.182.210.174/a82d92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc906ff7-e266-7c12-351d-00005697c41b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0aed7d","pattern":"[url:value = 'http://5.182.210.174/0aed7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--289134f1-5d33-0f03-634e-00007c520c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86521e","pattern":"[url:value = 'http://5.182.210.174/86521e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81353439-63cc-1ff6-0e47-00003255ace4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfeb03","pattern":"[url:value = 'http://5.182.210.174/bfeb03']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b416de8c-fcfe-28e3-f2cd-0000f736fa3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fcfd06","pattern":"[url:value = 'http://5.182.210.174/fcfd06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a7fed8-95fc-110f-80e1-0000b561dbf8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/sCy","pattern":"[url:value = 'http://129.121.110.105/sCy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976471-c8dd-fe16-a5f5-0000cebfef2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/41cb7b","pattern":"[url:value = 'http://5.182.210.174/41cb7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb046e1-8941-c70d-d949-00003114a4dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e67edd","pattern":"[url:value = 'http://5.182.210.174/e67edd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba3cb8c-6ce5-0f9e-f181-00007b885b66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05ac9f","pattern":"[url:value = 'http://5.182.210.174/05ac9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--894aca1a-cf1d-cea6-0d41-000042dbf4cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f76f77","pattern":"[url:value = 'http://5.182.210.174/f76f77']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4101cf-d666-29a7-ee2b-00007645d45e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2025","pattern":"[url:value = 'http://5.182.210.174/7b2025']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af01015-9a62-0899-a43d-000019e4c442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7e17e","pattern":"[url:value = 'http://5.182.210.174/e7e17e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfba318e-33e1-a7c5-710b-0000f2342ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3603","pattern":"[url:value = 'http://5.182.210.174/cf3603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c67a53f-957a-f7d5-0114-0000dbe75b58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3aa8b4","pattern":"[url:value = 'http://5.182.210.174/3aa8b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92addbe3-cb0d-850d-3366-00009579e844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/spc","pattern":"[url:value = 'http://43.98.174.233/release/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433e02f9-a05f-bc1f-4ba9-0000bd34729b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm6","pattern":"[url:value = 'http://43.98.174.233/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543d97b7-b362-2438-47ae-0000520ffda3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/DjEq","pattern":"[url:value = 'http://129.121.110.105/DjEq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6265b7-3426-a5a8-04d0-00008f5132c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/1htR","pattern":"[url:value = 'http://129.121.110.105/1htR']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6d1c05-b878-12b0-6034-000027c9c751","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/m68k","pattern":"[url:value = 'http://43.98.174.233/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f2db5-c139-0d83-276b-00006acebde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/98oE","pattern":"[url:value = 'http://129.121.110.105/98oE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--420e8fce-4162-9a38-3f87-000034e45725","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2EUE","pattern":"[url:value = 'http://129.121.110.105/2EUE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90eb65ba-0c52-4072-fb9f-000013ed9aea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/ppc","pattern":"[url:value = 'http://43.98.174.233/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af91646e-8f57-c1d6-b2a6-000030a6ae5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86_64","pattern":"[url:value = 'http://43.98.174.233/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da375343-8af6-612b-bf13-0000af81dd75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm5","pattern":"[url:value = 'http://43.98.174.233/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04128d3-e291-dc8e-a358-0000273f118b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mips","pattern":"[url:value = 'http://43.98.174.233/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3439326f-9a34-88e2-ed47-0000058815fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm7","pattern":"[url:value = 'http://43.98.174.233/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5593ee1a-72fb-6787-d73f-00004c3c7fc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mpsl","pattern":"[url:value = 'http://43.98.174.233/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5881e378-c928-1504-a997-000041786f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm","pattern":"[url:value = 'http://43.98.174.233/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595474-5ca8-dce2-d9a9-00006beef49f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86","pattern":"[url:value = 'http://43.98.174.233/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8fee197-9f41-b256-7be9-0000114af685","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.4.69:45512/i","pattern":"[url:value = 'http://110.37.4.69:45512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3789505d-3d89-9e4c-ad86-0000becd9eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/cCf","pattern":"[url:value = 'http://129.121.110.105/cCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0485d5b-5fb6-e47f-fd96-0000e38d6e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/86D","pattern":"[url:value = 'http://129.121.110.105/86D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a706ed47-83b5-a1e2-d282-00008310f6d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1c7216","pattern":"[url:value = 'http://5.182.210.174/1c7216']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce4daf6d-b011-c935-b7ff-0000958b8018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/OLE5","pattern":"[url:value = 'http://129.121.110.105/OLE5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63632005-eb83-a4cc-a3f0-0000b3829366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b08f0c","pattern":"[url:value = 'http://5.182.210.174/b08f0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab7aa58e-3783-d512-5bd3-00007c7da301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c3efb4","pattern":"[url:value = 'http://5.182.210.174/c3efb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ca4338-468d-0c9d-e043-00007eebc6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/aWG","pattern":"[url:value = 'http://129.121.110.105/aWG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfbad18-bce7-5c94-4bc2-0000d7855e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/072508","pattern":"[url:value = 'http://5.182.210.174/072508']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28e88bd-0847-cf06-6aa6-0000c0aa943b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d2891","pattern":"[url:value = 'http://5.182.210.174/0d2891']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f66748-e553-0c5d-2471-0000f49d33d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0089b9","pattern":"[url:value = 'http://5.182.210.174/0089b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c59c6a-4810-dbc8-3835-000087ccf8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5f60c7","pattern":"[url:value = 'http://5.182.210.174/5f60c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e1ccb-0d07-4479-935f-000068434c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cd6ef","pattern":"[url:value = 'http://5.182.210.174/6cd6ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af893644-c586-cc91-0a55-00009e9dcaec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50fc1e","pattern":"[url:value = 'http://5.182.210.174/50fc1e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a66c8-8212-b0aa-4833-0000ce64e69d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/N2J2","pattern":"[url:value = 'http://129.121.114.124/N2J2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca0f290-6963-c3f3-8a26-0000f939dd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d236bf","pattern":"[url:value = 'http://5.182.210.174/d236bf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b04f85a-5cf0-ec1b-5664-00004e55413f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/MyS","pattern":"[url:value = 'http://129.121.114.124/MyS']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a1f071-e83b-189f-fec2-0000142835f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/tbW","pattern":"[url:value = 'http://129.121.110.105/tbW']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f4937f-477c-bccb-233b-00004b6785ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/71431a","pattern":"[url:value = 'http://5.182.210.174/71431a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4df1fd-5f65-6141-0796-00004ca04851","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/8ZG","pattern":"[url:value = 'http://129.121.114.124/8ZG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91222a0b-3e92-02e3-7b44-000042282712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dS74","pattern":"[url:value = 'http://129.121.114.124/dS74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baac8dcb-9360-4d0d-ff31-000038c13570","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c70dba","pattern":"[url:value = 'http://5.182.210.174/c70dba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb4ce61-f144-865a-8e0a-0000241669e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/de3259","pattern":"[url:value = 'http://5.182.210.174/de3259']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d818f8eb-d06a-d716-f609-00009ec889d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/jdDj","pattern":"[url:value = 'http://129.121.114.124/jdDj']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba46951-0dc9-38ad-b747-0000fc8cb61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VFgi","pattern":"[url:value = 'http://129.121.110.105/VFgi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e41dac5-36a8-b5e4-0076-0000191e4d98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/gEK","pattern":"[url:value = 'http://129.121.114.124/gEK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c2b695-e3f3-7abc-eab1-0000c85b9595","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e216c","pattern":"[url:value = 'http://5.182.210.174/0e216c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d7558-782e-e98b-80d5-0000ccfc8a9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2adcae","pattern":"[url:value = 'http://5.182.210.174/2adcae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a694c277-7c64-e4aa-3bcf-0000ab66d94c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/191276","pattern":"[url:value = 'http://5.182.210.174/191276']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33835fe-6a83-f00f-a42e-0000c11f61ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e47c56","pattern":"[url:value = 'http://5.182.210.174/e47c56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9f65d9-009b-c9c4-7b52-00000e145a0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c4b84","pattern":"[url:value = 'http://5.182.210.174/0c4b84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625e9390-c037-84e7-f541-0000dfda5816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35079b","pattern":"[url:value = 'http://5.182.210.174/35079b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73938623-8d7e-f462-2204-0000caa24057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.143/bot","pattern":"[url:value = 'http://217.60.195.143/bot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56f4622-6ce5-96db-e10b-0000b49143bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9fdeb7","pattern":"[url:value = 'http://5.182.210.174/9fdeb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b70fa70-6f44-564d-1ec2-00001ed1558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e6c81e","pattern":"[url:value = 'http://5.182.210.174/e6c81e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44057ae-4438-fae4-14ff-0000a4b6bf33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/932a2a","pattern":"[url:value = 'http://5.182.210.174/932a2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0a30b6-7c88-8d1e-6f84-00000a3618ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5VZa","pattern":"[url:value = 'http://129.121.114.124/5VZa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a7d0e2-a841-81e5-56fe-0000979ab247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dnCf","pattern":"[url:value = 'http://129.121.114.124/dnCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44824e15-a3ea-f1d4-b941-000083d7a4f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16268e","pattern":"[url:value = 'http://5.182.210.174/16268e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4060af4a-938d-8396-b532-0000ed568c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dMX","pattern":"[url:value = 'http://129.121.114.124/dMX']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ca1064-9120-e7cd-5ec7-00008adb1f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/cZg","pattern":"[url:value = 'http://129.121.114.124/cZg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384aa6a-d1cd-a0c6-afb1-00000f0b1891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878f49","pattern":"[url:value = 'http://5.182.210.174/878f49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40bed60f-0a29-1818-b400-00000491fec1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/i","pattern":"[url:value = 'http://42.224.217.218:36543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a54cefe3-38ac-bb50-0e74-0000f95ec96a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/bin.sh","pattern":"[url:value = 'http://157.66.146.183:43544/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca72186-9103-b211-6c23-0000d5e30158","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.111.210.192:51471/i","pattern":"[url:value = 'http://125.111.210.192:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b12e8f-3bd9-c2c8-c7dc-0000a97e9336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/bin.sh","pattern":"[url:value = 'http://42.230.35.149:47141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d857cf-2160-d229-3bc7-0000137705d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt","pattern":"[url:value = 'https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c1bfca-8c70-8941-9686-0000e7701661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/i","pattern":"[url:value = 'http://196.190.224.62:43470/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e86aaf9-954f-b68b-8ef7-00001e507ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/bRci","pattern":"[url:value = 'http://129.121.114.124/bRci']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d4894cd-066c-a874-3092-0000002bc69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/485150","pattern":"[url:value = 'http://5.182.210.174/485150']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d881038b-ff99-5eed-dacd-0000a8845162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7866d1","pattern":"[url:value = 'http://5.182.210.174/7866d1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e194d0f8-01b1-504e-e987-000039fbf565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3020e1","pattern":"[url:value = 'http://5.182.210.174/3020e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c130dec0-4e93-b039-9d08-00005cbb0b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50435a","pattern":"[url:value = 'http://5.182.210.174/50435a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a4e46d-0279-b473-58ba-00005fd04ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/q0V","pattern":"[url:value = 'http://129.121.114.124/q0V']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899ef816-030b-0dbc-0e3d-0000270f4f13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/9WH","pattern":"[url:value = 'http://129.121.114.124/9WH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4fb203-3939-2f79-8a23-0000c6a06b20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/748a90","pattern":"[url:value = 'http://5.182.210.174/748a90']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de754457-ed4f-04d8-71e6-000029ff72f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/k7M","pattern":"[url:value = 'http://129.121.110.105/k7M']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed64ae95-e36f-d1e1-138c-000075f50b7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/aeecec","pattern":"[url:value = 'http://5.182.210.174/aeecec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a2b23f-c186-2cff-6fd9-0000356ae9ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/3tp","pattern":"[url:value = 'http://129.121.114.124/3tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a2e0bd-9494-12c1-1f31-00005f5619e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/seb3","pattern":"[url:value = 'http://129.121.114.124/seb3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab18c10b-5c36-06d9-b040-000039aed4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/NtB","pattern":"[url:value = 'http://129.121.110.105/NtB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61652ec-55ea-0b07-3dc9-000028d7e65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2af6fb","pattern":"[url:value = 'http://5.182.210.174/2af6fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dca2c82-a0d7-d2f0-05d2-00005447ca5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/59a197","pattern":"[url:value = 'http://5.182.210.174/59a197']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736100c3-0f9f-6193-2f86-00005d2a3c0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/29d455","pattern":"[url:value = 'http://5.182.210.174/29d455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3cc772-cc2a-d9f8-f3d4-000008d7c461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d4a3c0","pattern":"[url:value = 'http://5.182.210.174/d4a3c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dedb5-30f1-af4d-b9b5-0000ef30e972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cdb475","pattern":"[url:value = 'http://5.182.210.174/cdb475']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f71f1b55-d0dd-e205-b0f3-0000ba3f6f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07038c","pattern":"[url:value = 'http://5.182.210.174/07038c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd617f6-6be6-b2ce-55e5-00002f0cb934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5da97","pattern":"[url:value = 'http://5.182.210.174/e5da97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f011649-c432-3c36-e1c0-0000e0a2762f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VHo","pattern":"[url:value = 'http://129.121.110.105/VHo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22add7be-604a-4a72-0776-00005da81a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/nf1","pattern":"[url:value = 'http://129.121.110.105/nf1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066dd189-b8f2-6c71-c9ad-0000b1b28c1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ab4501","pattern":"[url:value = 'http://5.182.210.174/ab4501']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aaa7f06-44c3-8fdd-ebec-00006e5f16c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d687aa","pattern":"[url:value = 'http://5.182.210.174/d687aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9cd680b-e4d2-9cff-c147-0000b0d2f534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ytEr","pattern":"[url:value = 'http://129.121.110.105/ytEr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a508de48-0d59-ff36-71eb-00009b9ff9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e89cd9","pattern":"[url:value = 'http://5.182.210.174/e89cd9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b29e87-5dca-dae9-0aeb-0000daa13db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a05a88","pattern":"[url:value = 'http://5.182.210.174/a05a88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd285d4e-109b-f560-31a9-0000b4d26e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0cda73","pattern":"[url:value = 'http://5.182.210.174/0cda73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a280c6b-74c8-017d-e268-000029f486c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8fedf4","pattern":"[url:value = 'http://5.182.210.174/8fedf4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ab7b19-f9c2-adef-32a6-00006a4e0789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6be5c4","pattern":"[url:value = 'http://5.182.210.174/6be5c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff615bc-0d8a-3d8f-d7bc-00005b59f318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/688c63","pattern":"[url:value = 'http://5.182.210.174/688c63']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ec9164-a3fc-6e83-af70-00007a4e330e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff9728","pattern":"[url:value = 'http://5.182.210.174/ff9728']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f73175-dd46-6348-f2db-000043c88fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b9d62","pattern":"[url:value = 'http://5.182.210.174/9b9d62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c002b-1ad2-f561-7008-0000846ac1af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c1687","pattern":"[url:value = 'http://5.182.210.174/4c1687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff7ed0f-69c4-1b80-0609-00003723e892","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.aarch64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85512f1-a646-ba3f-9931-000023858959","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv6l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6a61a4-f046-7e52-6467-0000fb86620d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mips","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb78f8d4-a6ab-6a12-9804-0000fc4d4a32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sh4","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a637073-e3d1-1002-41af-00005945da39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv4l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21831b0f-8640-44a1-4a71-000022ad1bb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sparc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3465572-9ddd-5e3f-5c55-0000fb70b4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.m68k","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7a3b02-215a-d8b2-0ac5-00007b90e6b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.i486","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed893727-e671-2688-12f5-0000cd178e96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mipsel","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f8b146-a021-b0dd-98de-0000ced9519a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.arc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b42c1db-50fc-9bc8-cdf9-00003f995987","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.powerpc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93784132-1811-c3c5-d6b2-00006425f389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv5l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ef2d40-ea26-d37e-e48a-000094736da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.x86_64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a14e23b0-c99c-a823-4590-00001ee5a0e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv7l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349caca9-8ae0-7606-2e4d-0000d9d40fff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/bin.sh","pattern":"[url:value = 'http://42.224.67.199:54598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37a87be-49c1-2040-e8f2-0000ffa400b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598188e9-6fda-094f-0356-00003ba00f2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6ef709-d9a3-34dc-968a-00000a5045df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/c.sh","pattern":"[url:value = 'http://43.98.174.233/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697a3ad5-9be3-cb63-aaf8-0000ea4df447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/i","pattern":"[url:value = 'http://157.66.146.183:43544/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb53534-90aa-cf2c-b5bd-0000ce2e8dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/i","pattern":"[url:value = 'http://42.224.67.199:54598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60ef0a9-26ad-48ad-eff4-0000d1dbef2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/bin.sh","pattern":"[url:value = 'http://178.205.38.0:44205/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d226c26-3f4c-ceb4-0677-0000d49e1a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/i","pattern":"[url:value = 'http://222.141.61.27:55632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce07e70c-47b5-1fdd-13e6-000072374c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/i","pattern":"[url:value = 'http://210.208.111.220:36372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48dbf48-891c-d939-c56a-00007aabd498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/i","pattern":"[url:value = 'http://115.56.144.249:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be91106f-5867-4ca1-6de6-00007a37788e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/bin.sh","pattern":"[url:value = 'http://27.24.12.180:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c69972-f65f-b9ad-96d2-00007187afce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/i","pattern":"[url:value = 'http://210.208.111.100:38107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22de53d8-cdaa-0e6c-d642-00008711d040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/i","pattern":"[url:value = 'http://178.205.38.0:44205/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6bcdd3-c2f8-6ebc-e01a-0000df8ddfde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/bin.sh","pattern":"[url:value = 'http://123.12.234.37:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d18451d-9020-e008-6a2a-00007eea56d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/i","pattern":"[url:value = 'http://182.127.103.153:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ba9e73-1352-cf5a-b8ae-000066b76e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/i","pattern":"[url:value = 'http://27.24.12.180:50663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5a705e-591c-ab63-2b41-000036d58742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3e993d-3eee-aeae-a8ca-0000b9271f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mipsel","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b070f8e-a4fc-33b2-47f3-00000621fa03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/m68k","pattern":"[url:value = 'http://94.154.43.26:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b3b58-4903-041b-2cb0-000006d72cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mips","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5e9b4-9763-e15d-5f28-00004f247dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/ppc","pattern":"[url:value = 'http://94.154.43.26:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4541172-42cb-00b0-1b05-00009cdc4fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm6","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35321e4-801e-64f2-cd23-0000246028ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm7","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37870be3-1390-8f08-dfee-0000cffae428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/sh4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f67d87a-c88f-9729-8738-0000372713ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x86","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfec5a8-728d-021d-f8f3-0000cf95b5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x32","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7229429-fc92-a0d3-0db3-000003a736dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/i","pattern":"[url:value = 'http://123.5.150.18:40732/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dffabbd-9a97-793c-1294-00005901a2cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/bin.sh","pattern":"[url:value = 'http://106.40.240.24:35127/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14728ddf-f450-3afa-8af4-00004285c1a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/bin.sh","pattern":"[url:value = 'http://110.36.26.164:39914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dfb431-a8d0-03b9-05db-0000471a6ee6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/gchLdNMan179.bin","pattern":"[url:value = 'http://185.29.9.108/gchLdNMan179.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03ddcdd-79f2-7742-e81a-000004c2256f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Virginalling.asi","pattern":"[url:value = 'http://185.29.9.108/Virginalling.asi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9a7d27-1c19-3ac1-95cf-0000433f6886","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/bin.sh","pattern":"[url:value = 'http://42.228.39.67:45035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1b391b-7498-605d-5529-000060e44d33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/bin.sh","pattern":"[url:value = 'http://221.15.218.63:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a16103-bd09-e773-0e0d-00002b07327c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/775af1","pattern":"[url:value = 'http://5.182.210.174/775af1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64663856-a21a-79d3-ef4b-00002f096f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1eb5ef","pattern":"[url:value = 'http://5.182.210.174/1eb5ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6945bf3f-1f58-513e-a06b-0000beaae002","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e0758e","pattern":"[url:value = 'http://5.182.210.174/e0758e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1f5dca-fa65-7d73-011d-0000ea537838","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f48b45","pattern":"[url:value = 'http://5.182.210.174/f48b45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a81037-4723-90fa-8cb0-0000479d8f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3ee62b","pattern":"[url:value = 'http://5.182.210.174/3ee62b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3974aaf9-25d2-a06f-43c6-00004de3ec8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b62738","pattern":"[url:value = 'http://5.182.210.174/b62738']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8336c101-c747-dab1-fec8-0000e8ef5c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/12cd43","pattern":"[url:value = 'http://5.182.210.174/12cd43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eae43cc-827a-124d-175e-000086f9b8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ed422a","pattern":"[url:value = 'http://5.182.210.174/ed422a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478acac3-3e7a-a1e8-fe21-00005be7380a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d5aa8","pattern":"[url:value = 'http://5.182.210.174/0d5aa8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac3960d-90b6-d99f-38da-0000d9d868d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a34888","pattern":"[url:value = 'http://5.182.210.174/a34888']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd4e8997-e9bc-fe49-16a7-0000770fa493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c55677","pattern":"[url:value = 'http://5.182.210.174/c55677']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--013ad69b-1d82-a9d0-f947-0000145ea995","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dc7ecc","pattern":"[url:value = 'http://5.182.210.174/dc7ecc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5e924d-f0c9-ff2a-6acf-00004390cf6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.103.43:39953/i","pattern":"[url:value = 'http://125.43.103.43:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df257779-b601-dedc-955f-0000842c2dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/i","pattern":"[url:value = 'http://42.228.39.67:45035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6932e95f-4940-d727-c01d-0000d4fd356f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/i","pattern":"[url:value = 'http://110.36.26.164:39914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ef8ffa8-b19f-c5aa-89e1-0000035fcea4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sysupdate.online/tools/grab.cmd","pattern":"[url:value = 'https://sysupdate.online/tools/grab.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8050e46e-af97-96a1-033f-0000e746c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/bin.sh","pattern":"[url:value = 'http://125.46.213.70:47197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a42c4e0-426c-dea0-b378-00006ad0a762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/i","pattern":"[url:value = 'http://39.74.53.25:55617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00743a0f-9f94-1e23-9cf5-00008deb69cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.93.217:46445/bin.sh","pattern":"[url:value = 'http://110.36.93.217:46445/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02dba92-8704-b0d2-082b-000051143387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/i","pattern":"[url:value = 'http://46.236.65.43:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4661af0-da14-2eb2-79b1-0000554e087c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/bin.sh","pattern":"[url:value = 'http://115.54.132.26:37475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a54eb14-c167-2c9a-35ae-00003ed5f1e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/i","pattern":"[url:value = 'http://210.208.104.156:32771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac54a4e-75d9-0819-0110-00006fea74be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.114.184:58866/i","pattern":"[url:value = 'http://182.121.114.184:58866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c03dcf0-fef7-a477-0c49-0000f536edcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/bin.sh","pattern":"[url:value = 'http://222.141.61.27:55632/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949df10a-0e51-e5d4-8f7f-00007af8ffe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/bin.sh","pattern":"[url:value = 'http://110.37.43.119:55539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e009b6-43c0-c77a-3886-0000446d9e14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/i","pattern":"[url:value = 'http://222.182.123.61:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1afae98-59f9-72f1-649d-0000719b8319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/i","pattern":"[url:value = 'http://182.123.40.234:41791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f6a38b-145a-70cc-09b3-0000c8e2098b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.43.5:55742/i","pattern":"[url:value = 'http://61.54.43.5:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8e08f2-66da-7a7a-22b0-000080efc631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://83.68.249.16:45432/i","pattern":"[url:value = 'http://83.68.249.16:45432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8663a82e-a815-b444-ff33-000074c028c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/i","pattern":"[url:value = 'http://93.157.253.209:37860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea300153-5583-4372-b891-0000a54ed440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/bin.sh","pattern":"[url:value = 'http://113.231.229.97:60941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f0d05c-eef3-7a83-2ec8-0000ad55a53e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/bin.sh","pattern":"[url:value = 'http://93.157.253.209:37860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88acd1eb-f031-f829-d873-0000168261fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/bin.sh","pattern":"[url:value = 'http://175.147.220.91:36766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d30774c-c9a8-ac33-b6d3-0000cb51ee9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/i","pattern":"[url:value = 'http://1.20.91.236:53593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69541cbe-f0e7-5fed-07fb-0000b1c75e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/bin.sh","pattern":"[url:value = 'http://123.190.20.88:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9b37da-faba-76d1-4583-000083b21f8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/i","pattern":"[url:value = 'http://175.147.220.91:36766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d6fcdd-ce3a-9e30-6d30-0000a69e3a95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/i","pattern":"[url:value = 'http://42.235.1.153:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2036015b-d28a-a575-5593-0000423e2007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/bin.sh","pattern":"[url:value = 'http://113.58.131.62:38469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219480e9-9e3f-d512-a4b7-00009ea461b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/i","pattern":"[url:value = 'http://210.208.116.107:43623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d5a15e-e481-341a-d56a-0000d3f1ed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.189.169:34303/i","pattern":"[url:value = 'http://182.115.189.169:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80719cb-7108-482b-f594-00006ce8006c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/bin.sh","pattern":"[url:value = 'http://59.58.42.82:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb191c0-9121-d82f-12a8-0000b1e5eb51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/bin.sh","pattern":"[url:value = 'http://110.37.116.127:38782/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9778a7-8842-4861-cec1-0000a1ccfb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/bin.sh","pattern":"[url:value = 'http://39.77.172.60:34449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8545b5fe-7edb-e7be-d1d0-0000d428f413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.14:38206/i","pattern":"[url:value = 'http://115.55.130.14:38206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692ced19-f590-dda4-8463-00003e893c7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/i","pattern":"[url:value = 'http://221.15.218.63:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9d25b5-986f-7d76-2693-000051ae4655","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/i","pattern":"[url:value = 'http://37.78.176.5:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9882861d-3cbe-5c65-c29a-00008ee7a8d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/bin.sh","pattern":"[url:value = 'http://115.56.144.249:44378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d9e5ed-cc1c-c597-815e-0000894a6bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/bin.sh","pattern":"[url:value = 'http://61.52.33.100:54465/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69837c9d-82db-6360-fcae-0000f6868a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/bin.sh","pattern":"[url:value = 'http://115.48.160.237:33370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc27d8b-d418-7e60-d99f-0000f6ed15e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/bin.sh","pattern":"[url:value = 'http://42.86.136.138:39726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5df945-56eb-8f89-c2de-000052837db5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/i","pattern":"[url:value = 'http://183.23.139.207:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e44d03-b0a4-682a-eb37-00001480ec1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.14:60098/i","pattern":"[url:value = 'http://203.101.187.14:60098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99bdc712-3914-addf-75b6-0000dabfbc91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/bin.sh","pattern":"[url:value = 'http://222.182.123.61:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01fbe81-2756-1af0-1e6b-0000e3cfba7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/bin.sh","pattern":"[url:value = 'http://210.208.111.74:36898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37761186-8175-b5b4-2a2d-0000fb71d5b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/i","pattern":"[url:value = 'http://182.115.68.225:51187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb14c5cc-262b-cc86-bf63-0000c094dd07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/i","pattern":"[url:value = 'http://42.224.13.254:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84703c3c-e957-1d58-4534-0000faf1511d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/i","pattern":"[url:value = 'http://175.147.159.41:36190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9be5faa-5777-0f2c-80ca-0000316342f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.87/rondo","pattern":"[url:value = 'http://194.26.192.87/rondo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e303ea91-ba41-c48a-3e55-0000353fdd56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.182:55007/i","pattern":"[url:value = 'http://110.36.72.182:55007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b6808-d404-56ed-a716-0000c0932cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.12.61:55017/i","pattern":"[url:value = 'http://110.36.12.61:55017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a04ccc66-8daf-ef74-75d1-0000a0096765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/bin.sh","pattern":"[url:value = 'http://193.31.201.20:45160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e98506-ce43-73ee-b65b-00006fd90f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/i","pattern":"[url:value = 'http://123.190.20.88:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d188eb6-4c43-3c4e-89f1-000083c9ead2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/bin.sh","pattern":"[url:value = 'http://39.74.33.201:59336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9a2f-75f3-7c76-812f-00005b7e9894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/bin.sh","pattern":"[url:value = 'http://175.146.211.156:47338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783c061-a98f-125d-3a4a-00000228e1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/i","pattern":"[url:value = 'http://115.48.160.237:33370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb249-3059-7b6c-08d4-00001a7cf0e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/i","pattern":"[url:value = 'http://103.80.57.126:54698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b4d76-93cd-6240-6b65-00001d64e87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/i","pattern":"[url:value = 'http://106.40.240.24:35127/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f1a361-1a1a-9427-7f0a-0000f2f3c92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/bin.sh","pattern":"[url:value = 'http://219.157.18.143:41104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ef227b-f4b2-04e6-0093-00003bd57b8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/bin.sh","pattern":"[url:value = 'http://61.137.177.124:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a180-d770-ae98-1c5f-0000503dd30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/bin.sh","pattern":"[url:value = 'http://219.157.10.128:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7ffb4a-53d7-b757-72b1-0000be89198d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/i","pattern":"[url:value = 'http://221.15.192.179:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2429cd0-59f8-5092-7e38-00003cd99586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/i","pattern":"[url:value = 'http://39.74.33.201:59336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4594ad-f722-bdc1-97e5-0000364d71c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:48403/i","pattern":"[url:value = 'http://210.208.110.42:48403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6491e5-fc72-4c13-167e-000079da4924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.200.107.56:39903/i","pattern":"[url:value = 'http://221.200.107.56:39903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8810cdd-fca0-4013-6b68-0000472d1faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/bin.sh","pattern":"[url:value = 'http://42.52.204.44:32770/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d49d3e4-1f31-51c6-2c6e-0000ff885207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.31.205:38686/i","pattern":"[url:value = 'http://110.36.31.205:38686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc33416e-6153-5d1c-8284-0000e08dbc2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/bin.sh","pattern":"[url:value = 'http://42.235.91.77:35029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd08df-d228-4240-9ff9-00005faf03b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/i","pattern":"[url:value = 'http://210.208.111.74:36898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182e645-0763-dbda-1055-000089b5bc82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/bin.sh","pattern":"[url:value = 'http://115.62.148.107:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580935a4-cde0-f48c-e205-0000f1eaca58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.41.77:37933/i","pattern":"[url:value = 'http://182.113.41.77:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86cb9fd9-02ff-4eef-b955-00008c41c67a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/bin.sh","pattern":"[url:value = 'http://110.37.106.148:49825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978e9897-6912-2bf5-6bf9-0000bfb24579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/i","pattern":"[url:value = 'http://61.137.177.124:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27b5b8e-feaf-8b88-20ac-000081455fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/i","pattern":"[url:value = 'http://61.52.33.100:54465/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1475601-eb5a-4bac-8b49-0000f1ed0189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/bin.sh","pattern":"[url:value = 'http://61.52.156.140:46601/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de46ae2f-1c41-2a02-1ef7-0000685c316f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/bin.sh","pattern":"[url:value = 'http://45.170.224.217:57287/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--721b939c-c175-8ec5-e42f-0000d076147d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/bin.sh","pattern":"[url:value = 'http://122.139.13.204:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34777fd3-4a45-ffd2-35fc-00001d7f4f55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/i","pattern":"[url:value = 'http://115.63.145.118:58396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d39de9d-400d-1944-6f79-000041030eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/i","pattern":"[url:value = 'http://122.139.13.204:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7582d8cd-4457-d26d-9d4a-00002756edd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/bin.sh","pattern":"[url:value = 'http://42.55.212.26:51890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ed084b-000a-e7e4-fb38-00009edb3347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/i","pattern":"[url:value = 'http://193.31.201.20:45160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c213d50e-ca47-908c-d640-0000861918e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/i","pattern":"[url:value = 'http://125.44.196.6:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12dc49d-a932-0da2-4c38-0000ebf420f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/bin.sh","pattern":"[url:value = 'http://42.224.126.91:33505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df806548-da74-1e52-8328-00007fcd85cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/bin.sh","pattern":"[url:value = 'http://125.44.196.6:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1390fcab-2a67-cfda-3add-0000695dcac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/i","pattern":"[url:value = 'http://42.224.126.91:33505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649414ae-3216-1f7a-459a-0000fe5cb5a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/bin.sh","pattern":"[url:value = 'http://222.138.119.216:49346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c62c79-8926-d4ab-5c7f-0000e4601a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/i","pattern":"[url:value = 'http://42.180.15.83:57232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80eefb79-8856-1648-1a50-00001face1f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/bin.sh","pattern":"[url:value = 'http://182.115.68.225:51187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3be3f9-9cbc-52d5-3492-00008a3b4454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/i","pattern":"[url:value = 'http://42.86.136.138:39726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549c3bf9-6a58-5477-a9a2-00008b683df2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/i","pattern":"[url:value = 'http://45.170.224.217:57287/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9977154-f523-f904-ae91-0000c78c8d3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/bin.sh","pattern":"[url:value = 'http://216.249.4.20:36657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e4c013-33e6-5b0e-3649-0000868ba99b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://120.28.135.245:34017/bin.sh","pattern":"[url:value = 'http://120.28.135.245:34017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b60989e-1353-34c8-ddd2-0000f7d1b135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/i","pattern":"[url:value = 'http://60.184.163.17:41849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89d0c71-b6e0-661c-6a6e-0000834ee7c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.64.242:41071/bin.sh","pattern":"[url:value = 'http://105.186.64.242:41071/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf3bd79-337c-2d7c-2809-0000da8965ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/i","pattern":"[url:value = 'http://182.114.192.237:54399/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef35c14-0f83-4dd5-fa6e-0000dde3ff42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/bin.sh","pattern":"[url:value = 'http://60.184.163.17:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a281f6-be58-95f9-31fe-00005f7f2124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/i","pattern":"[url:value = 'http://210.208.110.51:46526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51c68bd-db6b-5d94-f890-000080d595e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.226.103:50631/i","pattern":"[url:value = 'http://42.230.226.103:50631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06568758-c31c-56e7-1ba2-00006013c0ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/bin.sh","pattern":"[url:value = 'http://210.208.104.156:32771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a2ef96-79f4-72ea-fd99-0000ecd6ac1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/bin.sh","pattern":"[url:value = 'http://183.23.139.207:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17871253-b0ee-f503-a336-000091a4b300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/bin.sh","pattern":"[url:value = 'http://42.224.13.254:55917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac73f69-003c-9d8f-4670-0000eeaec894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/i","pattern":"[url:value = 'http://113.58.131.62:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288e2c3d-fe3b-4aba-ff00-0000ebf4f6cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/bin.sh","pattern":"[url:value = 'http://210.208.116.107:43623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99550c01-0462-433d-0767-00004200c577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/bin.sh","pattern":"[url:value = 'http://113.228.149.193:49576/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad34f8d-dd73-1632-fda6-000075a01df3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/i","pattern":"[url:value = 'http://42.235.91.77:35029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312f28a7-08b8-3959-cda2-0000decd9d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.94.120:47055/i","pattern":"[url:value = 'http://123.14.94.120:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e50647c-1820-ebd8-0d70-0000c3672b93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.181.9:49913/i","pattern":"[url:value = 'http://27.215.181.9:49913/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188f594a-b374-208f-9893-00009f05350c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.185.8:38535/i","pattern":"[url:value = 'http://42.234.185.8:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82efb59f-373b-e974-b99b-0000ab3e1ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/bin.sh","pattern":"[url:value = 'http://175.148.29.181:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0dc3d6-f5b7-33f3-5917-0000e314f4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/i","pattern":"[url:value = 'http://110.37.116.127:38782/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bbd3b8c-09fe-8f24-130a-0000953b8778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/i","pattern":"[url:value = 'http://175.146.211.156:47338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9182c76-c319-e78e-9496-00008e57a26d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.157.254:58146/bin.sh","pattern":"[url:value = 'http://115.58.157.254:58146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e908fc-5d1a-affe-78d7-000059a71f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/bin.sh","pattern":"[url:value = 'http://42.180.11.230:34276/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684aa226-5aa4-af29-59f4-0000c28e0971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/bin.sh","pattern":"[url:value = 'http://103.80.57.126:54698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4be416-3f46-8554-48cd-000037c13476","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/i","pattern":"[url:value = 'http://120.84.213.21:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fc0f70-01d7-8d13-e875-000093148f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.174.81:41413/i","pattern":"[url:value = 'http://42.238.174.81:41413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b883b71-f1e8-3797-e0b8-00007e94a378","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://96.245.232.132:44492/i","pattern":"[url:value = 'http://96.245.232.132:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a769e76-cd30-7ad5-b716-0000f2ae22ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.23.55.232:7702/linux","pattern":"[url:value = 'http://119.23.55.232:7702/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ac1fde-4dde-ffe1-142c-0000615bbcdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.84.190.146:9593/linux","pattern":"[url:value = 'http://47.84.190.146:9593/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1524a54-cc1c-0255-fbf8-000010305434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/i","pattern":"[url:value = 'http://61.137.204.59:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08a8e1d-17df-94e7-46cb-000048e5aaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/bin.sh","pattern":"[url:value = 'http://42.230.41.97:51870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77889c43-43f7-025e-403f-0000b83db844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/bin.sh","pattern":"[url:value = 'http://61.137.204.59:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2896e2ae-15ae-5d01-4020-000052b492f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/bin.sh","pattern":"[url:value = 'http://196.190.224.62:43470/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf37e19-128c-5748-2eef-000072892a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/bin.sh","pattern":"[url:value = 'http://130.12.209.147:55609/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84df23a-6a05-4423-cf9e-0000f36d9b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/bin.sh","pattern":"[url:value = 'http://123.134.41.212:48460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9952c34-d5e3-8a58-594f-00006e40046e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1860c5-8ee7-11e2-21a6-00001583e229","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ecef52-99f4-e29f-a7c0-0000eb14fef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c47eafd-6418-28ea-5c41-000005436a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0aa510b-d331-4ad5-169d-00006d808c5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1fc72d8-d85b-ea13-00f2-0000deee84b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883ff041-4afb-f4bc-6c4a-000027f46e51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef730e72-e75e-8c99-f21a-0000f48cf477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.23/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6631916d-5875-21f0-dae3-00008dfda6da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c0d7c9-691f-e932-8f80-00003f157931","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22031b-0cca-ebb1-2718-00001a481ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/bins.sh","pattern":"[url:value = 'http://94.154.43.23/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f8b35c-8d44-262e-7357-0000ed5e15aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.23/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df78face-9d63-2b61-e495-0000dfca0e02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106bde2b-9051-3065-d110-000005b5bcfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.23/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43726967-365d-dfbc-b4d5-0000b3da58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b079588c-39ef-6fab-19f7-000047e2b93e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff38c0d7-39ef-9c43-774b-00009f480934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64014230-c482-2ded-c2cb-00006555bd4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ec058a9-fc94-208d-b053-0000cbd936c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d76e6-01f9-7169-ffff-000065a36b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.46/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4112f36c-3102-bedb-aba3-00007993b49d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c86e6f0-2b6c-15e2-8aa0-00004d4d446d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d384f9-21e4-6ed3-f2da-00000e56d301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a15e7b-ba5b-408a-0504-0000293b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.46/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ab3613-e204-7c27-1e17-0000220eb36b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins.sh","pattern":"[url:value = 'http://94.154.43.46/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aade6b-896d-36d8-e515-0000994cc3ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a5c847-ec04-8ec7-f63a-0000243cd4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b92bafe-82bf-10ca-4f4c-00004b07af35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.46/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77e681a-cc58-05e2-ad9f-0000ff5ede5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448c5f1f-cfb2-9d59-04d9-00003a212f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/bin/support.client.exe","pattern":"[url:value = 'https://91.92.243.232/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5589621b-8d17-c103-cd9e-000027aa3bcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7739a0-8fd2-6b0b-6b64-0000edeb71b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c19e80-6164-4ee4-520c-000016e20b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a076e107-fe15-2709-0654-00000f3a452f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/bin/support.client.exe","pattern":"[url:value = 'http://194.26.192.164/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd68fa8-5bdb-b8be-36f9-0000f0b6babf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/i","pattern":"[url:value = 'http://123.134.41.212:48460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8055ff7-927c-ec17-6d0a-000009b49527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/bin.sh","pattern":"[url:value = 'http://182.114.192.237:54399/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c63b1ad-1cc5-c6f2-a91d-00000cb324ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/bin.sh","pattern":"[url:value = 'http://58.22.18.152:33899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf616b57-00ec-a210-451a-000021399e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:36195/bin.sh","pattern":"[url:value = 'http://115.55.179.35:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a12955-ac83-8609-1cea-00007b96a597","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/bin.sh","pattern":"[url:value = 'http://109.236.46.199:42682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826f9bd3-94ff-429f-1b23-00003401e15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.225:33235/i","pattern":"[url:value = 'http://115.63.242.225:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7276eaf-9881-c162-ea48-00007826ac66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/i","pattern":"[url:value = 'http://58.22.18.152:33899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee5ddd0-04ce-21eb-3e5e-00009d09dd55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/i","pattern":"[url:value = 'http://121.231.139.26:36392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f32bbc1-84d6-41e8-1126-0000abfd9f15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/i","pattern":"[url:value = 'http://109.236.46.199:42682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbaa57b-0ade-621a-eafd-00005416d0fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d7f673-3cf4-ae3f-4c33-0000f8909213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/bin.sh","pattern":"[url:value = 'http://37.78.176.5:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9beb39e-2779-ede3-74a1-0000e0cab30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/dlink.sh","pattern":"[url:value = 'http://95.155.151.113/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d951a704-34db-2e49-03f6-00000e55a6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://chrome-windows.ru/ChromeSetupWindows.exe","pattern":"[url:value = 'https://chrome-windows.ru/ChromeSetupWindows.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81d2e60-3ecb-aa25-6a5d-0000d4a0eba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.193.111:43262/i","pattern":"[url:value = 'http://125.42.193.111:43262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86410f7d-f05e-c143-fe8e-00002e1cd3e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da0e2b82-f5db-03d5-128e-0000870f5af4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm7","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a05e8-8363-51fa-9818-0000a54e885b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/m68k","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc146ef-f09d-5eeb-2851-00001c88c84a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/sh4","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba4f7f7-05f5-fc80-c476-0000cebb30cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mpsl","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a993a4b8-d29f-70cc-4ea0-00009c5651bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/ppc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e76313e-3676-9712-fd9b-0000a5b85e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mips","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b08591-0b10-c5e2-0f87-00008532483c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.78:38525/i","pattern":"[url:value = 'http://27.37.100.78:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db71290-2fbb-a856-94c0-00002494abbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd51ae1-64e5-4723-7b56-00001ac22312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/spc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134f9300-178c-f8f2-64e8-00004879c065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/bins.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad091b14-11f3-b48e-ec5f-00003fb33d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm6","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec624e29-ed31-4b25-a3ad-00000eac5ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.7:34859/i","pattern":"[url:value = 'http://123.11.10.7:34859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7577f479-f953-7882-8c2b-000011e7d622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.137.87:60618/i","pattern":"[url:value = 'http://120.28.137.87:60618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34004aae-1699-8bf0-6fc6-00002d06927f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm5","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84219576-4fc6-3b64-0262-0000e4553fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--202aaf38-3c7d-5170-82a4-00002c2a9856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86_64","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f9227a-9647-42da-142f-0000cec3a4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4aac669-878d-5e07-3624-000018d38f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/i","pattern":"[url:value = 'http://42.231.88.100:39090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d42d8b-aab5-7506-cc0f-0000b882fde8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/bin.sh","pattern":"[url:value = 'http://42.231.88.100:39090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0032bc-9c8f-1690-98bb-0000d5421604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/bin.sh","pattern":"[url:value = 'http://39.79.249.142:34161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7045a9cc-4220-fcf2-dae6-000015b09845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.22.249:50192/i","pattern":"[url:value = 'http://110.36.22.249:50192/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58928aa3-3b84-0aad-712e-0000f0252466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/i","pattern":"[url:value = 'http://39.79.249.142:34161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d1bf303-9b56-6bb6-410b-000043c48078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.4.125:52901/i","pattern":"[url:value = 'http://110.36.4.125:52901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3506b50e-3ecb-baa9-13fa-00008e399759","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/bin.sh","pattern":"[url:value = 'http://78.60.75.209:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e9af9-a88c-419c-78de-0000d27ad161","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/i","pattern":"[url:value = 'http://123.8.45.111:33017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9680b7-9afd-60a8-6de8-00001688032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/bin.sh","pattern":"[url:value = 'http://123.8.45.111:33017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0e0e7c-94c7-0dc1-a438-0000d0a6d408","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.233.197:57647/i","pattern":"[url:value = 'http://110.39.233.197:57647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fc5342-b718-599c-435e-0000a2f5ac10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/i","pattern":"[url:value = 'http://78.60.75.209:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a41e8df-8e7d-d977-543e-0000e5df3fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.143.204:58754/i","pattern":"[url:value = 'http://182.121.143.204:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb6d4e7-401d-415e-83db-00009f8d9542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/bin.sh","pattern":"[url:value = 'http://46.236.65.43:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f4ec50a-1ec7-0e8b-41d8-0000de088feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/dvr.sh","pattern":"[url:value = 'http://130.12.182.77/dvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f3984d-1e6a-396f-71f1-00001118f8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/tvt.sh","pattern":"[url:value = 'http://130.12.182.77/tvt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330d8dba-6cb3-187f-b01a-0000cc23a4e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/i","pattern":"[url:value = 'http://121.234.156.10:48875/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--becee502-641c-2b1b-9e70-0000a8277960","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://sysupdate.online:443/agent.ashx","pattern":"[url:value = 'http://sysupdate.online:443/agent.ashx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30052ae-c888-3434-5f9c-0000af1d0ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Godabeg1.exe","pattern":"[url:value = 'https://rcf.co.mz/Godabeg1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e29b1dd-372a-d1be-0de5-0000ce4be426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta","pattern":"[url:value = 'http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5740982-5728-53fc-9c3d-0000906d8499","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://172.245.195.245/35/img_190431.png","pattern":"[url:value = 'http://172.245.195.245/35/img_190431.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c169dd9e-615f-e167-def0-00000303b23b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cecf4eb6-bb53-7893-f00f-000050847a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta","pattern":"[url:value = 'http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb28d7c-9cd0-1e29-7d5b-000002dfe000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/23/img_185335.png","pattern":"[url:value = 'http://107.175.88.87/23/img_185335.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9067d2e-af95-f7dd-145f-0000b5578c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/bin.sh","pattern":"[url:value = 'http://182.113.37.79:56846/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21309cd3-c6c2-43f7-06e1-000080943b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/i","pattern":"[url:value = 'http://222.219.74.117:52755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71263cc-0652-e4f8-107e-0000d1aa6311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/bin.sh","pattern":"[url:value = 'http://27.193.35.180:45367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9bb525-1a4c-c2d9-8638-0000349fd16a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/i","pattern":"[url:value = 'http://182.113.203.98:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7578f3-b71b-964e-3397-0000847dfe66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/i","pattern":"[url:value = 'http://182.113.37.79:56846/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc046e0-ec0b-6b10-b7fd-000060d3bf11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.97.97:57347/i","pattern":"[url:value = 'http://123.9.97.97:57347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d91f8f8-a9c7-2a3e-c51a-000014ccafac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/bin.sh","pattern":"[url:value = 'http://175.167.183.194:52110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2daee4f-6c95-7461-c89b-0000294b6a39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/blink.sh","pattern":"[url:value = 'http://130.12.182.77/blink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9468b101-322f-4056-4727-00004b03599e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.5.94.63:4370/i","pattern":"[url:value = 'http://36.5.94.63:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9eeb1a-8df0-52a9-d824-00004ffaf706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/bin.sh","pattern":"[url:value = 'http://42.235.1.153:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3785f4b-4597-ce79-a19e-0000eb449ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/bin.sh","pattern":"[url:value = 'http://61.52.179.141:33618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8735c9-72ef-e0c4-d815-0000bbe53c6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/177395","pattern":"[url:value = 'http://5.182.210.174/177395']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa6f492-5fd7-c2eb-9321-000045840bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c60df5","pattern":"[url:value = 'http://5.182.210.174/c60df5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722c0ddf-4e06-c736-1af0-0000f5d5257f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ab3","pattern":"[url:value = 'http://5.182.210.174/340ab3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eb81e5-3e5b-734a-85c5-00004e1fc51e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/410ae5","pattern":"[url:value = 'http://5.182.210.174/410ae5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343b63eb-b550-03e7-acd2-0000ae1aab9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/56db7c","pattern":"[url:value = 'http://5.182.210.174/56db7c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3814db65-f7f4-760a-2692-0000c27c84f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78acf3","pattern":"[url:value = 'http://5.182.210.174/78acf3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bc4fef-cde7-5010-0e4d-0000e3fe7e57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a0d95b","pattern":"[url:value = 'http://5.182.210.174/a0d95b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--950504a9-08fa-2ae1-99cc-000036d9125f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/923a9e","pattern":"[url:value = 'http://5.182.210.174/923a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba43ef4-5d4a-6c85-4a00-0000d6c5e285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16f2c2","pattern":"[url:value = 'http://5.182.210.174/16f2c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b0e4c0-4b32-e77b-130c-000094aa56bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e34be1","pattern":"[url:value = 'http://5.182.210.174/e34be1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9d52f5-fdd6-8689-824f-0000414a2455","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/18c0e1","pattern":"[url:value = 'http://5.182.210.174/18c0e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77524903-8a7b-3216-12c4-000052ee3f14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/033fd6","pattern":"[url:value = 'http://5.182.210.174/033fd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a122362-e083-f1f2-6206-0000f2355cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/i","pattern":"[url:value = 'http://175.167.183.194:52110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1259bc0-6f7a-5232-0327-0000bc6854b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.69.240:41361/i","pattern":"[url:value = 'http://110.37.69.240:41361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d9770a-38c3-03b0-0560-0000669045fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.73/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b76c29-ab70-70d3-1420-00005fa73ad3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/xsvvfgrj.png","pattern":"[url:value = 'http://192.109.139.73/xsvvfgrj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ed2aca-3163-6655-c9e4-0000d99e04f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/jackin.png","pattern":"[url:value = 'http://192.109.139.73/jackin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d642ee-6db7-f2ca-358f-0000faf5e2f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/bin.sh","pattern":"[url:value = 'http://115.49.64.77:52921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91863854-64a9-27ce-df57-00008c8759bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/i","pattern":"[url:value = 'http://61.52.179.141:33618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893b029e-e188-184c-a8e1-000080c65b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/i","pattern":"[url:value = 'http://115.49.64.77:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae21a26-22e8-5fc3-520b-0000369f0639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/bin.sh","pattern":"[url:value = 'http://221.15.192.179:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9011edb3-464e-18be-86ec-0000b20ea824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/i","pattern":"[url:value = 'http://113.239.96.147:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68bbfcb-da94-eddc-f69c-000070bbd436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/i","pattern":"[url:value = 'http://182.119.229.251:51013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce62bf99-85eb-cead-d384-0000c655741c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/bin.sh","pattern":"[url:value = 'http://182.113.203.98:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb50c70-7f24-e958-226b-0000b739252f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/bin.sh","pattern":"[url:value = 'http://115.50.98.44:53110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f153954-3a99-900b-f23d-0000fc9aaacc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/bin.sh","pattern":"[url:value = 'http://110.37.26.69:40361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c14dd45-4cfb-1f93-0837-0000ac6b6596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04152430-cb90-b8d2-6ebc-00004c28a577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.113.164:60386/i","pattern":"[url:value = 'http://219.156.113.164:60386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06eab4a-92a3-dd2d-6e79-00006e826405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm4","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e752061-27f0-20e6-89a6-000008884596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5473021-3011-0eeb-b07e-0000fa078b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/k.sh","pattern":"[url:value = 'https://94.154.43.60/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf1409c-70e0-8ae8-3c9d-00003abc890f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.aarch64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895da45d-f2cc-31d4-16c6-00004fa3ac60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mipsel","pattern":"[url:value = 'https://94.154.43.60/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c02591-7484-98fb-c821-00007b308527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm4","pattern":"[url:value = 'https://94.154.43.60/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1fe04c-f50e-0a7c-9694-00005e80cf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mips","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43bbe3a-061c-a7c8-005e-000016c74f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86_64","pattern":"[url:value = 'https://94.154.43.60/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf7d567-0291-ac84-e929-00006678ce22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86_64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5967faf0-8e8b-a921-d78f-00007c37cbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm7","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c9742b-616e-910a-cba2-000069852ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm7","pattern":"[url:value = 'https://94.154.43.60/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b16e97-2d50-6039-c2c8-00004b322ebc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mips","pattern":"[url:value = 'https://94.154.43.60/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e191cf00-07d8-df64-0249-00003f1c2d1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mipsel","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a12788-04cc-c347-c820-000060442ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86","pattern":"[url:value = 'https://94.154.43.60/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1390ca6-7371-9a67-7e01-0000da33a3d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/killbotx.x86_64","pattern":"[url:value = 'https://94.154.43.60/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af43a1be-88bb-35c2-b2d1-0000637f0b99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/aarch64","pattern":"[url:value = 'https://94.154.43.60/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21417a4-c55c-46e6-8cc5-0000355ee05b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/bin.sh","pattern":"[url:value = 'http://112.247.84.112:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859d6ccd-d199-2bb6-879c-00002af78b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/aarch64","pattern":"[url:value = 'https://quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c979ab7-7d7c-f753-505e-0000d1a2c930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86","pattern":"[url:value = 'https://quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0795af26-fbc5-71ba-c7c1-0000614cb816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15dd59c1-817d-de6d-7126-0000f700f1b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86_64","pattern":"[url:value = 'https://quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9cfe9c-0350-8958-d42e-000073f917f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00944c77-35a0-fbab-bc4a-00000e666c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af9c3e11-5e91-d97c-35d9-000051ee4854","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm4","pattern":"[url:value = 'https://quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38bb43a6-7b37-f639-8913-0000ae641286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mipsel","pattern":"[url:value = 'https://quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d692e64-c286-7a8c-1ed9-000084c1f60f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78a3361-b481-12f3-a143-00004465eb10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d9f819-d81e-e80e-1db3-0000c4ebdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec03ce-0dd2-dbd4-19f1-0000edd603f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/bin.sh","pattern":"[url:value = 'http://112.109.219.147:35136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ad4b3d-0493-4dc3-a9e6-0000632f7a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm","pattern":"[url:value = 'http://176.65.139.232/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e17bb6-36dd-5dd2-a3c7-00002e63b53c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm7","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893219cb-43d4-f4a7-d73a-00003a5bc41e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f52667-7330-3b47-60ed-0000b7e71db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5770013a-5542-786f-28c1-0000949465c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mipsel","pattern":"[url:value = 'https://iloveboats.st/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bb0ddd-8468-e035-9ad3-0000983af7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mips","pattern":"[url:value = 'https://iloveboats.st/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a53e4b-911b-70d5-78c0-00006fc06b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.aarch64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d2eb3-c481-876b-97c9-000046d870ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mipsel","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2c31761-6c09-17bc-466b-0000ba8df397","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm7","pattern":"[url:value = 'https://iloveboats.st/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6446c57f-d754-68d5-9643-000082e9ad09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36956fab-4de2-c489-a443-0000435be7ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm7","pattern":"[url:value = 'https://quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31d569b-9b05-d595-a819-00008ad78457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/i","pattern":"[url:value = 'http://136.60.32.162:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d4a0377-49bc-b3b6-1be4-000018ecc06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29378e79-9f4b-4e14-8ff0-0000b2eb0692","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03edfc3-3275-a1af-d9b4-0000a05ea97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ae8ea4-bd9d-db2a-4bef-0000be698bac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86","pattern":"[url:value = 'https://iloveboats.st/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a06bc0-50f8-ae80-0367-00003506c2ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mipsel","pattern":"[url:value = 'http://176.65.139.232/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4b78e0-4b4d-3ffa-a828-00005b7cfe94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/aarch64","pattern":"[url:value = 'https://iloveboats.st/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42043af-4cb1-028f-fd0e-0000c6686319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b80ec84-fb17-4cfb-0d52-00000d39c939","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3edb59a-961a-a06c-1264-000043fbbc63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b09bc9-39cc-bfcc-d4de-000033dc08a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/k.sh","pattern":"[url:value = 'https://mail.quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73988d49-f156-8b22-8e10-0000fbc40ee2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed7517-290f-febe-b784-000061ece3cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mips","pattern":"[url:value = 'https://quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc82c20-a015-4226-9255-000060b5229f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/killbotx.x86_64","pattern":"[url:value = 'https://iloveboats.st/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae82a0c-f916-e0a4-ad29-00003cd61ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm4","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9d4f69-697e-9924-60d9-00004a2f09ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6698220b-2079-7ae2-0ef9-0000a145f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c26395-2aef-8a7e-ff42-00003414a425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bca46db-9d7d-29a5-f679-0000a8385c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm4","pattern":"[url:value = 'https://iloveboats.st/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131b2ba1-0b38-d06c-1cdb-0000d0d9466f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/k.sh","pattern":"[url:value = 'https://quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3799610a-a0b4-dce3-ba47-00000cd4b149","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mips","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103b4871-550e-4f00-3ba9-000028ee6bf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c94659c8-7ffd-5c2e-6e35-00009f0c8027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a161b5d-5451-fed5-33d7-0000cdf086fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86_64","pattern":"[url:value = 'https://iloveboats.st/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--974d536b-eccd-a196-44c2-0000290f5242","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/k.sh","pattern":"[url:value = 'https://iloveboats.st/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc671a7-3ff1-c9ae-d734-00006c6221f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.x86_64","pattern":"[url:value = 'http://176.65.139.232/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30833fac-ae34-1447-d173-0000087b193c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.i686","pattern":"[url:value = 'http://176.65.139.232/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326fabd8-f840-a7d6-2d45-0000e71238ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm7","pattern":"[url:value = 'http://176.65.139.232/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e617b164-cfd0-a6e1-1315-0000c5a53c8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mips","pattern":"[url:value = 'http://176.65.139.232/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05952fa8-e95e-aced-ea70-0000b16416d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.sh4","pattern":"[url:value = 'http://176.65.139.232/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2d424c-3910-e718-8df2-00000a6640e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efe972e-cbd0-ce74-4115-0000a2a0eddc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2df25610-fcf0-da64-8777-000057028f11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a4e295-ed1e-b85e-3887-0000b25dc972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/i","pattern":"[url:value = 'http://110.37.26.69:40361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d4b388-1489-24b0-05ea-00005506e401","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.aarch64","pattern":"[url:value = 'http://176.65.139.232/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c7cdff-009e-a1d5-a4b3-000031ba8f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.ppc","pattern":"[url:value = 'http://176.65.139.232/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad84afc-b3cf-edfc-b5fc-0000ca363219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99b8d0f-6a6e-bc68-6957-000016daaeb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b132d146-eea0-aaf8-2ea3-0000d09511b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77b8e9d-850e-6716-d5ca-0000636a73bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b701a83f-5c85-9b8e-fcae-0000ca98e1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.228/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540893da-ce55-180a-4f17-000020dfa4f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/bin.sh","pattern":"[url:value = 'http://112.248.106.46:52448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06b34d4-1ea4-d287-9375-00001fbc9395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86_64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810b0206-c66c-ae36-35f3-0000551f8297","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/bin.sh","pattern":"[url:value = 'http://115.63.145.118:58396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23e931-1b81-a99c-c192-0000fc04f355","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/bin.sh","pattern":"[url:value = 'http://115.61.41.247:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adea0b27-2ed7-8f23-99d1-00006a5fc7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/i","pattern":"[url:value = 'http://78.25.149.153:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b37814-6bea-7fae-7070-00005ad75f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/i","pattern":"[url:value = 'http://115.61.41.247:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d6e02b-39bc-a173-ead7-0000f1a068c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.226:56122/i","pattern":"[url:value = 'http://115.56.147.226:56122/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dab1cd-58d6-cf9b-aacc-0000f6d9e40a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/bin.sh","pattern":"[url:value = 'http://110.136.97.153:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff58d37-ba91-fcc1-eb39-000096a85601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.bak.20260810122841","pattern":"[url:value = 'http://95.155.151.113/unifi.bak.20260810122841']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55f9ed3-808f-8386-af49-00006faf25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.51.94:48009/i","pattern":"[url:value = 'http://115.63.51.94:48009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54d6c44-d4ec-2aa5-f9f7-000042c079f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/i","pattern":"[url:value = 'http://110.136.97.153:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ecd100-8540-d71a-3763-0000c5e91f97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d8668","pattern":"[url:value = 'http://5.182.210.174/7d8668']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0576a084-9a75-308b-9ec0-0000052b9e17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4850bd","pattern":"[url:value = 'http://5.182.210.174/4850bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--128128e4-642c-a669-e613-00009d7f20dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff5279","pattern":"[url:value = 'http://5.182.210.174/ff5279']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014a23af-f1bc-eec9-26be-00000ef2801d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5490a4","pattern":"[url:value = 'http://5.182.210.174/5490a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2437714f-cf8f-cf0a-9df8-0000012962cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2150fc","pattern":"[url:value = 'http://5.182.210.174/2150fc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62ec4227-d46c-c15f-916c-0000a287967d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3e070d","pattern":"[url:value = 'http://5.182.210.174/3e070d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581b1cb8-b1d3-c24c-2e18-000053297eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e26c93","pattern":"[url:value = 'http://5.182.210.174/e26c93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1bfd3-248e-273b-29c6-0000cfe9ae17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45d538","pattern":"[url:value = 'http://5.182.210.174/45d538']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9254dddc-591b-bea6-1d95-00002875a7d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad704a","pattern":"[url:value = 'http://5.182.210.174/ad704a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f29b82a-808f-5993-84c8-0000af023a4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/498482","pattern":"[url:value = 'http://5.182.210.174/498482']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b042e-e066-3196-8d49-000028ac2221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/def5c2","pattern":"[url:value = 'http://5.182.210.174/def5c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6e03fd-0502-82c8-4b57-0000c84dba6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd9da7","pattern":"[url:value = 'http://5.182.210.174/bd9da7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fea9f9a-0fcb-2762-b456-0000b2f4e524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e00f60","pattern":"[url:value = 'http://5.182.210.174/e00f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07175a33-e7a7-be77-2f19-000011dc2e79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/650040","pattern":"[url:value = 'http://5.182.210.174/650040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e2c0b-48bd-e8bf-57a5-00001dc4ccb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/894fc5","pattern":"[url:value = 'http://5.182.210.174/894fc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55d72dd-4929-a689-e42b-000079f4d505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e40c97","pattern":"[url:value = 'http://5.182.210.174/e40c97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a189028-4b2e-7aa3-d417-0000a0054090","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/17949b","pattern":"[url:value = 'http://5.182.210.174/17949b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a88be2fa-26a2-927a-f50a-00005a0778c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm4","pattern":"[url:value = 'http://94.154.43.60/fallen.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c86f8847-7fdc-a6da-c695-0000aff4b0a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ea4b7","pattern":"[url:value = 'http://5.182.210.174/9ea4b7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b447ae-0154-feae-f36a-000054a49be2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05416a","pattern":"[url:value = 'http://5.182.210.174/05416a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a6605b-27ea-a2ba-28e4-0000ced7e953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0654cb","pattern":"[url:value = 'http://5.182.210.174/0654cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c368b1a-4286-14b4-5c54-0000f20ab73d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dca7ad","pattern":"[url:value = 'http://5.182.210.174/dca7ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff65fc2-65fb-c18d-37b7-00000fa0115d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d69405","pattern":"[url:value = 'http://5.182.210.174/d69405']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15e3a1d-de51-18b1-be00-000049f2d7e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea4b38","pattern":"[url:value = 'http://5.182.210.174/ea4b38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb216b7d-05d2-83bb-1748-0000623f1c54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a200f","pattern":"[url:value = 'http://5.182.210.174/4a200f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e6cd3b7-280f-6e68-b4e7-0000da76169a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6441d0","pattern":"[url:value = 'http://5.182.210.174/6441d0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4f433e-bb56-7d93-fa9e-0000e7b4cd1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1e2ea","pattern":"[url:value = 'http://5.182.210.174/c1e2ea']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab61b86-32f4-987a-240d-00009afaff55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4403a","pattern":"[url:value = 'http://5.182.210.174/f4403a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12c7113-08c9-dc6c-9b0a-0000eeea7c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9e14a1","pattern":"[url:value = 'http://5.182.210.174/9e14a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1a405b-845f-1037-0e41-00009984322e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f41d69","pattern":"[url:value = 'http://5.182.210.174/f41d69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbfc4c6a-3188-0c19-9b17-000059f1b5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8f41cf","pattern":"[url:value = 'http://5.182.210.174/8f41cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425fa11d-6dcf-392f-c3f1-0000ac40b402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7ba4cb","pattern":"[url:value = 'http://5.182.210.174/7ba4cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b39a63-4d74-598e-c217-00006721b093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9cb1d9","pattern":"[url:value = 'http://5.182.210.174/9cb1d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eb396b3-d2ec-b78d-c97e-0000461dca33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76e8cc","pattern":"[url:value = 'http://5.182.210.174/76e8cc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fa06d6f-fb3a-e44d-d1f8-0000b1787f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/84e985","pattern":"[url:value = 'http://5.182.210.174/84e985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b12dd66-50b0-c2a2-ba88-00007f03385d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d72242","pattern":"[url:value = 'http://5.182.210.174/d72242']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f296e7a-f548-ef9c-2d29-000014dc76f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6501cd","pattern":"[url:value = 'http://5.182.210.174/6501cd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3182b340-5597-f22d-7211-000048b2d728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm7","pattern":"[url:value = 'http://94.154.43.60/fallen.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313f695a-2cba-9391-8e7c-00009704132a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b802381-0b7c-a169-8c89-00004790c043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d53f3f-1623-c6be-7b4c-00007526ebb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44664e9-b9b3-aac8-c993-0000cc6be473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbc24d5-b5c8-a2db-5411-00004c0bacbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a752c94-f2e1-3be7-15dc-00001732bbd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:7001/bin.sh","pattern":"[url:value = 'http://110.36.11.225:7001/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb28533-16c1-df56-dc58-0000b1c0a082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f3e1a2-4bca-656f-673c-00004d5bad8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8456c34c-2a08-4d37-1a65-0000ef2941c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3758d21-2c59-514e-7ce0-000063bb0a6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/i","pattern":"[url:value = 'http://112.247.84.112:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4f0368-3b57-6e61-a1f7-00007ffcd00f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.86:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a901c-832e-d8e0-2aa6-000006023d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.153.126.58:36155/i","pattern":"[url:value = 'http://183.153.126.58:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd69849-82ea-15d3-1d6d-00005d15844e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/i","pattern":"[url:value = 'http://119.116.20.47:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248b92ce-fef8-af92-3a04-0000565a4cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/bin.sh","pattern":"[url:value = 'http://119.116.20.47:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f224b435-f1d8-de9b-55cd-00006a7ced4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/bin.sh","pattern":"[url:value = 'http://60.18.11.118:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6038d2b-0f2d-ac99-cf70-0000d74a5be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/bin.sh","pattern":"[url:value = 'http://42.234.166.234:40751/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee1e149-d6c3-bc76-7f36-00001b55e34c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.235.239.199:45573/bin.sh","pattern":"[url:value = 'http://124.235.239.199:45573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48891a3b-7219-adb7-f7e9-0000f8018ec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.48.28.98:35726/i","pattern":"[url:value = 'http://36.48.28.98:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1588d6d5-f3f3-2230-8a3b-00004b35dbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.57.227:57005/bin.sh","pattern":"[url:value = 'http://115.55.57.227:57005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa89fc4b-e825-5ac1-0544-0000a4d4b240","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/bin.sh","pattern":"[url:value = 'http://42.235.174.78:56482/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--482e612a-7b98-19d8-bd00-0000619cd1f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.31.73:46065/i","pattern":"[url:value = 'http://182.113.31.73:46065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93045fe3-60be-f07a-c801-0000659cae46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/bin.sh","pattern":"[url:value = 'http://39.77.117.255:35209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b5d322-c17e-df41-e5d5-0000dea1061b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.209.29:47837/i","pattern":"[url:value = 'http://182.123.209.29:47837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15b8c19-8e6b-7176-fc06-00008c0e82ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.239.199:45573/i","pattern":"[url:value = 'http://124.235.239.199:45573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d29d20-e617-5a1f-b3a6-000060094473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.68.164:58733/i","pattern":"[url:value = 'http://61.52.68.164:58733/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64d3c24-30ba-391f-c2b2-0000b0acef96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/bin.sh","pattern":"[url:value = 'http://221.205.10.123:45052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb32b6d4-b848-f7ee-d92c-000004be8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/i","pattern":"[url:value = 'http://60.18.11.118:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c34bbd76-2e6f-9a2b-eee5-0000146f1962","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/i","pattern":"[url:value = 'http://39.77.117.255:35209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab55aa9-ec97-5b44-5b41-0000d980d166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.105.15:56982/i","pattern":"[url:value = 'http://219.156.105.15:56982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca0f324-fb70-9bf8-388a-00002275ba28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/i","pattern":"[url:value = 'http://221.205.10.123:45052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e87539-81b5-5be0-775e-000023557ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://waf.proxytunnel.co:889/gg11","pattern":"[url:value = 'http://waf.proxytunnel.co:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15a7c-9cd3-8593-e5a3-000055afe2ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.m","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2535b9-0881-d0a9-ec6e-0000d7cc96fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/i","pattern":"[url:value = 'http://112.198.193.62:36489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd071657-6ea7-88e1-3445-00001f795d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.a","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18da9424-1fb3-3bb7-3278-0000b819df5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/bin.sh","pattern":"[url:value = 'http://112.198.193.62:36489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f99686-05dc-8db4-a46d-0000f2b44528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/i","pattern":"[url:value = 'http://115.58.177.86:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ce02db-d7a7-d216-e9d7-00003b4012bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/bin.sh","pattern":"[url:value = 'http://182.127.103.153:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2c5670-ee18-3992-4882-00007ebebb11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e326cff-f844-95b8-42ce-00004b710426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/i","pattern":"[url:value = 'http://123.8.90.13:33466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7349ed5-a653-dabc-c02f-0000b142e183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/bin.sh","pattern":"[url:value = 'http://112.198.138.178:59015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643098e1-d8ec-7d41-9c1c-0000c317cfe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/i","pattern":"[url:value = 'http://66.8.135.142:50647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8279d7b-34b6-01e2-65ad-0000cd37838b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/bin.sh","pattern":"[url:value = 'http://42.235.94.77:54061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8d18ed-8401-44ef-ccf8-0000445e6102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/i","pattern":"[url:value = 'http://42.235.94.77:54061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2c965f-e30f-8601-b042-000086556d57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm7","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfbb9d2-e762-5004-5d29-000065139a88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11724a8a-3fe7-b5db-578d-0000ac496c76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm64","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df548ce3-214a-14f4-bddb-0000a4e26922","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mips","pattern":"[url:value = 'http://95.155.151.113/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521f6583-c5f0-cefb-246e-000082877232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/bin.sh","pattern":"[url:value = 'http://42.53.51.109:44329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a864a2a-9b41-484e-ca21-0000cfe10768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0a79-38b6-ee41-75d2-000011bdd329","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86_64","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50993476-7410-6039-8873-000096f3890b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/i","pattern":"[url:value = 'http://112.198.138.178:59015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55894959-f9c3-7345-a904-000022c49f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/bin.sh","pattern":"[url:value = 'http://125.45.64.34:37683/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828ab63e-aabf-ce73-6c14-00006571eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/i","pattern":"[url:value = 'http://125.45.64.34:37683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3bf6e69-f1e2-9ded-c2ce-000013d05dc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.27:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2a0fa1-f182-424a-12b4-000070efa7ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/i","pattern":"[url:value = 'http://123.173.101.27:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135bdeb1-4731-a207-1f7e-0000d3e8b177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/bin.sh","pattern":"[url:value = 'http://125.44.43.60:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea066d4-d8a3-0ba3-4b05-00009b87b7b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/i","pattern":"[url:value = 'http://124.92.80.153:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cdd181-f3ed-046b-070f-000069777e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/bin.sh","pattern":"[url:value = 'http://61.52.94.69:44759/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa797254-8494-9e4b-2694-0000ab131184","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/bin.sh","pattern":"[url:value = 'http://38.43.193.197:44535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472e07b1-2cad-359e-f012-0000a37d4ac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/i","pattern":"[url:value = 'http://175.172.13.19:60669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc7841c-3833-40b1-2069-0000bba5152b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/bin.sh","pattern":"[url:value = 'http://210.208.110.21:51285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c61ec185-c4b8-9aa8-dd8f-00003b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/i","pattern":"[url:value = 'http://38.43.193.197:44535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39539dde-3fff-d805-8552-000045eca9b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.202.64:34690/i","pattern":"[url:value = 'http://219.155.202.64:34690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e5b6e8-62d6-3311-cec2-00003178db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/bin.sh","pattern":"[url:value = 'http://42.180.15.83:57232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a41de6-6788-b190-beac-000077cee212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/bin.sh","pattern":"[url:value = 'http://175.147.159.41:36190/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d723ae-9897-7991-371d-0000818e0572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/i","pattern":"[url:value = 'http://210.208.110.21:51285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2895e21-0c17-740c-3967-00007da522e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/i","pattern":"[url:value = 'http://61.52.94.69:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8daad9a0-fca3-499b-4420-00004bf72ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/bin.sh","pattern":"[url:value = 'http://78.25.149.153:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3cbc1a2-dcf1-dd6c-7dbf-0000f0dd3124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/i","pattern":"[url:value = 'http://211.158.166.117:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67568aea-56c3-3e78-9bb2-0000136794bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/i","pattern":"[url:value = 'http://71.207.128.92:54954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49bac6af-2a3f-b861-97d8-0000904675e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/i","pattern":"[url:value = 'http://115.50.98.44:53110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f61b257-24e0-608c-46b7-000071c3e040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/bin.sh","pattern":"[url:value = 'http://121.234.156.10:48875/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0422cb-04fb-b23b-71d3-0000c953be9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.176.25.195:35054/i","pattern":"[url:value = 'http://160.176.25.195:35054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f3b117-fb16-ddbd-8311-00003475cce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/bin.sh","pattern":"[url:value = 'http://125.44.223.124:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66373e4d-ffac-c94e-b771-0000754ce529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8061d6a-7622-4a35-24c2-0000a739c2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/bin.sh","pattern":"[url:value = 'http://182.119.229.251:51013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b769c35-558b-0bc1-b17a-0000b24473d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/bin.sh","pattern":"[url:value = 'http://219.155.195.159:54905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dddfe4-fad1-bfae-3def-0000a45f4a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/bin.sh","pattern":"[url:value = 'http://61.52.217.13:59440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef473a-7ccb-6c59-6124-00005207034d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/bin.sh","pattern":"[url:value = 'http://115.58.54.222:37664/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e3eba9-6665-d46b-c9f3-0000a656ba16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.37.213:45304/i","pattern":"[url:value = 'http://42.230.37.213:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bf0e12-c4c4-5a53-14c3-00002e89b127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/i","pattern":"[url:value = 'http://42.232.108.113:57428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168d737-d5d1-ef57-d829-000058420cd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/i","pattern":"[url:value = 'http://125.44.223.124:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3584a696-516c-4a4a-ff62-00001f60dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/i","pattern":"[url:value = 'http://61.52.217.13:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13014b24-cd8f-789e-6c8a-0000afb80dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/i","pattern":"[url:value = 'http://115.58.54.222:37664/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9703497-18b2-3a99-1c23-0000e70569e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/i","pattern":"[url:value = 'http://219.155.195.159:54905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8422b44-edfa-80fa-7129-00006d47bd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/bin.sh","pattern":"[url:value = 'http://125.44.19.167:51278/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d864e57-b83c-3391-2d02-0000f7a43998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/bin.sh","pattern":"[url:value = 'http://110.36.86.83:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f63bfb8-3a8e-f399-ec95-000088dd688c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/i","pattern":"[url:value = 'http://140.237.36.213:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36178fb6-093e-d4f1-2cb7-00000a6dc679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://myissuereport.live/i/PDF-ticket/download.php","pattern":"[url:value = 'https://myissuereport.live/i/PDF-ticket/download.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0491f833-143b-e4ee-1164-00008936d604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c727d1-4c6f-cc3a-2f93-0000a7f8ff3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.173.164:46012/i","pattern":"[url:value = 'http://123.5.173.164:46012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99d9cd2-4bc6-fd08-5184-000029318ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/i","pattern":"[url:value = 'http://125.44.19.167:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985b6e6-b62c-5f63-d51d-000076549754","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/bin.sh","pattern":"[url:value = 'http://123.129.131.159:42876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8d6560e-d4b2-c5b1-95a3-00007db9e53f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/i","pattern":"[url:value = 'http://123.4.178.145:35087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05423c79-f26e-423f-12e1-000044774f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09410297-7e2f-4120-a41d-00003fc7f856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5892f4ee-7204-0f6c-ba5c-000039db6e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2e801e-5938-8cce-5da5-0000059b5e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6acb7694-3afd-3320-f428-00007bbf90a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/Exodus.sh","pattern":"[url:value = 'http://176.65.139.228:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92166770-8215-0997-ba16-00007eef655d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mips","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7172b2-3abb-66a9-1385-000008a735e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x86","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf726934-f51e-c23b-8555-0000dd20c8a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a230d146-6212-611f-081b-00003e9b708c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf58b629-b9a2-4980-c547-000014c5e8f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/ohshit.sh","pattern":"[url:value = 'http://209.141.44.218/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e86f60-2ac1-bcef-413d-0000f01593a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x32","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1bebf75-d631-b913-c6b7-0000e9c8c308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mipsel","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427055a-5161-609c-1400-00004d20af92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c2eddd-7106-610a-f8fc-0000ef9dcd66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.99/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d946a51-886d-99be-88ed-0000f178d574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/i","pattern":"[url:value = 'http://124.235.243.150:48322/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7186526-b256-6819-3246-0000c350788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ac3c48-92be-bb71-2b71-0000266c0f89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://yogasitesdev.wpengine.com/2/","pattern":"[url:value = 'https://yogasitesdev.wpengine.com/2/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a675331-5325-b48c-43cc-0000939f304f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e73ab47-03ae-9ff0-fa4c-0000055c9b11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f63c84-6b8e-1350-15fc-00003567d8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/payload.sh","pattern":"[url:value = 'http://149.50.154.101:8000/payload.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1215e6b6-e633-784d-f5cc-0000505c779f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.loong64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.loong64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cf6339-2999-0c28-271d-00009ac77c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/bin.sh","pattern":"[url:value = 'http://115.192.88.110:35897/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea0746f-0b90-4048-d684-00002a78d607","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/bin.sh","pattern":"[url:value = 'http://115.49.203.6:36171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d276a9d-44cd-024e-bc41-00003ba55876","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ac8c9f","pattern":"[url:value = 'http://5.182.210.174/ac8c9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71b6c78-2cfb-fe3d-51de-0000edb991b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bf39af","pattern":"[url:value = 'http://5.182.210.174/bf39af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee0a026-ffdd-46fa-fa47-0000c6bb2183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81ee8a","pattern":"[url:value = 'http://5.182.210.174/81ee8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b65fb7-f37d-3061-aa00-00002b46fa1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Zzz","pattern":"[url:value = 'http://129.121.110.105/Zzz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e25deb51-970a-474b-b579-0000315806a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e748fa","pattern":"[url:value = 'http://5.182.210.174/e748fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f56e3eb-e4e0-f683-8436-0000a69a2e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vkZ","pattern":"[url:value = 'http://129.121.110.105/vkZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f65803-2f48-c663-a686-0000d08c7bf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b73206","pattern":"[url:value = 'http://5.182.210.174/b73206']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098f0077-d502-9346-7f13-0000d8cfa5c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2020be","pattern":"[url:value = 'http://5.182.210.174/2020be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed071e35-d9e5-e8a4-ad64-00009cf3c844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3066","pattern":"[url:value = 'http://5.182.210.174/cf3066']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24fcfd1-ca5f-ca15-4874-0000d23c8d8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/oaF","pattern":"[url:value = 'http://129.121.110.105/oaF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e77e2a-5423-6694-65da-00004e7ea5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/30e00c","pattern":"[url:value = 'http://5.182.210.174/30e00c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a28d6c67-fb9b-7175-bc0f-0000e3af439f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ozDb","pattern":"[url:value = 'http://129.121.110.105/ozDb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48a461-21e8-3a93-5831-00000f0f54c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/968def","pattern":"[url:value = 'http://5.182.210.174/968def']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ac114-5058-7164-b84f-000090df2029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/f2Um","pattern":"[url:value = 'http://129.121.110.105/f2Um']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3124389-8b28-c834-c07f-0000327f08fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/63ab9c","pattern":"[url:value = 'http://5.182.210.174/63ab9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c122cf2-0805-cad9-9666-000088bef8fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9aaf74","pattern":"[url:value = 'http://5.182.210.174/9aaf74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26fe9173-8be9-b144-7276-0000909ef7c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05f7c6","pattern":"[url:value = 'http://5.182.210.174/05f7c6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7019b162-49f5-8536-6af4-000026906da9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/WzCx","pattern":"[url:value = 'http://129.121.114.124/WzCx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f28ca8d-5bc6-c191-fe92-0000193b5a2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1Gk","pattern":"[url:value = 'http://129.121.114.124/1Gk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a6e3fe-7009-c192-a5b8-000001cabd70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/4YN","pattern":"[url:value = 'http://129.121.114.124/4YN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d9a783-cf5f-2308-b6b6-0000094ca07f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1sPM","pattern":"[url:value = 'http://129.121.114.124/1sPM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c19650-eb16-a8fb-0765-000053b2b4dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/FyTv","pattern":"[url:value = 'http://129.121.114.124/FyTv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8601ce0-0438-b327-7b3d-0000f651a9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm5","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52234cfd-27bb-1a94-f10c-0000b7c1d404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.22/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67803707-fc73-a27d-e3f0-00008c867058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f220a6-f520-31e0-2795-0000efb4d30b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49d3da5-d546-8a4d-f3dc-0000cf937dd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3980fc-9d71-79a3-cfa7-00002c2edf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm5","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d316b479-aa96-952a-0b5c-0000db2bc84f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e67ca8-7426-6475-8f87-0000e9fe3853","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.spc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a0c2f1-ee2f-da8a-ca65-00006f6a4afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d537e1d0-bc45-f139-d045-0000862717e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db75a4-f0a6-485e-0619-0000694e362a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad64a143-dcf0-3a55-bc6d-00007b695e73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd12f33f-f0bf-4f30-aad3-000017692488","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d63cfba-6184-246a-8410-0000a466c546","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.m68k","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014ffb6c-b4eb-a229-14a1-0000a490139c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mips","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ca4433-5938-e1e2-38c3-00003dffbf90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85c38bc-0ba4-81e0-eb90-00004d70e306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pin_img.png","pattern":"[url:value = 'http://64.224.17.122/pin_img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746e05ac-c88f-925e-1a0d-0000f36959c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pinmsi.png","pattern":"[url:value = 'http://64.224.17.122/pinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876277d0-279e-da30-021b-0000ba3d9f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/efd.dat","pattern":"[url:value = 'https://bapak178.org/efd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2476bb-aa38-c0ab-b094-0000781b6e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://admetricslab.org/get_verify?i=27407","pattern":"[url:value = 'https://admetricslab.org/get_verify?i=27407']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57374267-4684-009b-485e-0000c31c10d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/gwb.dat","pattern":"[url:value = 'https://bapak178.org/gwb.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b8334e-be9c-fa8f-8a07-0000bfa3bb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ownnewstoday.live/MicrosoftVerify.msi","pattern":"[url:value = 'https://ownnewstoday.live/MicrosoftVerify.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c735e3-a04e-b676-c183-0000f8e3be3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/i","pattern":"[url:value = 'http://115.192.88.110:35897/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc9a805-f83f-bf48-4d36-000076dbcbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/i","pattern":"[url:value = 'http://115.49.203.6:36171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1dc3b58-2626-a5a3-b03b-0000250e4b80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe","pattern":"[url:value = 'https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cb92b7-2db3-cb3b-cc8b-00007ba65efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/gold/random.exe","pattern":"[url:value = 'http://62.60.226.140/files/gold/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff94e69-f942-3a4a-c762-000019eb9d0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/amka/random.exe","pattern":"[url:value = 'http://62.60.226.140/amka/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2ef09b-799a-a7e2-8f63-0000cd5afec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta","pattern":"[url:value = 'http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86e851ee-86f7-d142-d84a-00005a7bbedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/img/img_220749.png","pattern":"[url:value = 'http://147.182.181.241/img/img_220749.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515a7305-1541-326f-253f-00007d1115cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojscrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojscrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f645fff-9c07-97fd-f38c-00003d1295a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://duct-master.com/00/newMSI_PRO.png","pattern":"[url:value = 'https://duct-master.com/00/newMSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c607f59f-850d-7807-8d5f-0000f5963afe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/bin.sh","pattern":"[url:value = 'http://42.232.108.113:57428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73237b3-7595-ecb4-c2c1-00006bbef4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.255.40.244:42822/bin.sh","pattern":"[url:value = 'http://58.255.40.244:42822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a1727c-1010-71f9-9485-000015455c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.156.166.167:43949/i","pattern":"[url:value = 'http://94.156.166.167:43949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd186ef-0bd1-57bc-628c-0000cac50fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install_tm.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install_tm.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1ed920-5e53-5719-9868-000066ce40a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa3df7c-55fd-ee61-da77-0000e0e2fff2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.47.72/22/goodthingsforbestfutureforme.hta","pattern":"[url:value = 'http://107.173.47.72/22/goodthingsforbestfutureforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7d7d7d-e851-9b35-2a3b-00001c7ab46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.173.47.72/22/img_172149.png","pattern":"[url:value = 'http://107.173.47.72/22/img_172149.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98c4c9b-ee0d-4b4e-085c-0000bdf2dd74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd9bf2e-87bf-1cd6-6263-00005af7f6fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'http://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82515586-ed4c-5cef-6a0b-0000ca6eea6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'http://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5eda470-f4c7-e2ee-a114-0000b457ca73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7c7d80e-07a4-9825-f483-0000b2097047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/bin.sh","pattern":"[url:value = 'http://140.237.37.249:40109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf378d43-9b93-afb0-51b9-0000b03a3581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://sh.classera.com/Naew8m","pattern":"[url:value = 'https://sh.classera.com/Naew8m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3602f2-f5da-47db-bccf-0000bfba15c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79111d42-a48c-1c02-4dd2-000012b45097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd21df52-96ef-4695-bba4-0000d1877643","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b94e93e9-0f05-30bb-54e8-0000994d1b76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'http://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526a45cf-84c7-d8dc-5246-00004eeca787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'http://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ba7be6-5725-01bb-8995-0000be661374","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'https://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f670eac-4fab-2ac1-22da-000069413880","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9951e7fe-b0e0-cc1a-7860-0000467f1fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/i","pattern":"[url:value = 'http://140.237.37.249:40109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7613b42-ff7b-cd88-3b23-0000816fa201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9872ebc0-db2b-749c-c9e4-00006658e941","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb80649-a463-27c2-9d16-000018dd6fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6937ac60-fecb-2685-de63-000006aed80d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'http://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2423c8a-3d09-d37c-b739-0000f3f58269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae6503a-ed56-dbe6-7e64-00002e583f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6058cd-90e4-f0df-15dd-000052d1f662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a9163-e18d-925f-99ad-0000666d1391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d73250d3-c0fb-7977-7a4a-000009d5c2c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978583c3-3824-30ba-5167-0000eae3d107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta","pattern":"[url:value = 'https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eac2c28-8748-f391-845d-00002479d605","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6ce567-54a4-9ef4-fcbd-0000dee3b24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63eef917-9a6b-5002-cce9-00006fd365b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb0e432-28cd-d014-5305-000022eaf11f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'https://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab763ef7-a85d-5c5b-5957-0000bc5eef24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd2e8257-52aa-1f22-7c53-000048e68a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6639e608-9ad6-d254-47eb-0000ad44c812","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eebef295-588c-d9cb-967a-000005fd22ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fc89e1-52e8-0b03-2fbd-0000021c62b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a225761d-a810-0857-5495-0000d2e97f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc15ace-feca-1646-9694-0000c370b9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'https://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ea09c1-8f21-4d8c-a6d3-0000f5060996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'https://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035af30d-1a6d-7f53-2a37-00004881dc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/uks.exe","pattern":"[url:value = 'https://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1c438c-216b-c482-82da-0000d30ce7ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'http://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--946ffcdb-8f8c-68f4-9bb0-000010ae4d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'http://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eacb940-cde3-7ec0-9ce8-00006e8b3232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/uks.exe","pattern":"[url:value = 'http://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1001c7-eac3-369e-472d-0000643ae410","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd85ee37-c084-7ff9-951e-0000887d1fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/bin.sh","pattern":"[url:value = 'http://27.37.102.150:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d5b1f7-ed5e-6161-95ab-00004f9a991f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'http://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedb0a7c-f9ca-3fb4-f4e0-0000427337e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f57c1ce-e5ff-7e59-1931-000048a9dc23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'http://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25287666-a50e-b49a-95ee-0000f4fc8493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'http://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976df81d-4aef-a8f9-8dcb-00000fee034a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'http://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd5094b-fd48-8612-6db7-0000afc2ba36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e87b93","pattern":"[url:value = 'http://5.182.210.174/e87b93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff3ef1e-a37d-d2d3-1641-00001f9c874e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a3cf9f","pattern":"[url:value = 'http://5.182.210.174/a3cf9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b50f18-998a-093d-93e1-0000dad0ecdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e9b28","pattern":"[url:value = 'http://5.182.210.174/6e9b28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7d3aba-9006-04ac-5fef-000037a2edef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c15cf0","pattern":"[url:value = 'http://5.182.210.174/c15cf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28e6b8f-b053-c21d-3c26-0000921605ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/285a62","pattern":"[url:value = 'http://5.182.210.174/285a62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3803fe03-f3ba-72eb-e4e7-0000e5066646","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/422255","pattern":"[url:value = 'http://5.182.210.174/422255']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f41b9b-1405-1c04-8b1c-000016d6efc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/539df1","pattern":"[url:value = 'http://5.182.210.174/539df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb1d74-9c1f-5543-cc8c-00005454f245","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e77c7d","pattern":"[url:value = 'http://5.182.210.174/e77c7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7e7906-f35a-274d-d0dc-0000b9bba797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b1f5e","pattern":"[url:value = 'http://5.182.210.174/3b1f5e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3e2eba-5fdc-f086-9a44-0000f6d92aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b848da","pattern":"[url:value = 'http://5.182.210.174/b848da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e17cbe-3cb5-befe-7b16-00006f3172d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a6fb8","pattern":"[url:value = 'http://5.182.210.174/1a6fb8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91241c83-1510-9d6b-65d4-0000cd71596a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c76cc8","pattern":"[url:value = 'http://5.182.210.174/c76cc8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0776e216-e1b8-7ddc-6382-000039f3df0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'https://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f05c54c-3a1f-a400-ebdf-00004b11e601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.150/img/1.jpg","pattern":"[url:value = 'https://192.255.195.150/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1542814-1b87-97b0-2058-0000de027594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.173.9.104/img/2.jpg","pattern":"[url:value = 'https://107.173.9.104/img/2.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b9d963c-6e69-a895-73f9-000070a29ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'https://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b9d93d-80a9-5936-e393-00003a824697","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/img_190847.png","pattern":"[url:value = 'https://216.9.224.73/33/img_190847.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c62409-41d1-2379-8bcf-00007848f837","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.158/img/1.jpg","pattern":"[url:value = 'https://192.255.195.158/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d3e94e-f0e8-b20c-2c7b-00001e142e8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c613eac-0033-770f-026b-00005f64ab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a2c295-0402-d434-24a5-0000ceba4868","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'https://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2bdc634-3a1c-8e5b-97aa-0000ff64b7b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'https://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fdd753d-0fb5-380d-d560-000072ef10d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'https://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65f0504-3f53-a908-4e9e-000075dc55e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'https://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde94570-62dc-3a14-fc36-0000f45fccaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f032ce-0bd8-8ba2-c434-00003f8a583c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98afc71b-bf44-ac10-c02f-000026d7f657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e107387-f28d-828c-e422-000009a972a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/bin.sh","pattern":"[url:value = 'http://42.230.25.51:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b05bae1-e13b-a5c8-08b8-000032164d9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/i","pattern":"[url:value = 'http://42.230.25.51:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e36a42-6d87-918a-ee11-000021792ccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.104.58.65/yurumpmonday.png","pattern":"[url:value = 'http://193.104.58.65/yurumpmonday.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d10380-4763-44f2-b5aa-0000cfbaef1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Mistakeful.pfb","pattern":"[url:value = 'http://185.29.9.108/Mistakeful.pfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c07fda5-4be2-2a6f-90a4-000014b3d00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin","pattern":"[url:value = 'http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c28593-21fb-f02c-8e88-000038bd8cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/nVgXuGSv49.bin","pattern":"[url:value = 'http://185.29.9.108/nVgXuGSv49.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae950140-38a1-fa66-6575-00001d929e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/i","pattern":"[url:value = 'http://27.37.102.150:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b016c-bd2c-9385-d5b2-00003b729fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/nHxFirwKSyH79.bin","pattern":"[url:value = 'http://185.29.9.101/nHxFirwKSyH79.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee15b951-1a72-9d62-c9cc-0000c1d2f0dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/pOuBKgVzyeBCT11.bin","pattern":"[url:value = 'http://185.29.9.101/pOuBKgVzyeBCT11.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2638337-1598-f66b-166c-000011474d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/Standardpakke.toc","pattern":"[url:value = 'http://185.29.9.101/Standardpakke.toc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b0612c-c508-1fad-d97e-000072a613e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/vSmLoKx110.bin","pattern":"[url:value = 'http://185.29.9.101/vSmLoKx110.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07b7e22-44c0-8ce8-294d-0000b9d42b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/MnuuOvukjaufYr227.bin","pattern":"[url:value = 'http://185.29.9.101/MnuuOvukjaufYr227.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffacd72-021f-54c7-6f5b-0000803f4b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://wp.ameyiando.com:8888/web/office365com.dat","pattern":"[url:value = 'http://wp.ameyiando.com:8888/web/office365com.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51652fa-3ced-1d94-b0ba-0000307c39fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab9b70c-bcdb-e542-2848-0000e4558fc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de284457-7c11-e07d-ff1c-00003c255fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc86f1f-8615-4bb6-221c-000094d69cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec23381-d973-f38e-ae87-00009580f24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f385cacc-de74-f8ca-ac2a-0000c0046212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e455f7d-899c-fe88-e2f3-000093ca4a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akocrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akocrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d38186-b34c-d3db-85a9-00002c8c08ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta","pattern":"[url:value = 'http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f038dbea-b623-930c-2f02-00001acdb462","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_050827.png","pattern":"[url:value = 'http://107.172.172.254/img/img_050827.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c1f0a-df5c-2860-2c45-00000663a2bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://verdiva.life/admin/MSI_PRO.png","pattern":"[url:value = 'https://verdiva.life/admin/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45e9804-9842-4411-dbe9-0000c6349147","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c4271a-6d9b-f62d-86a7-0000a30bd78d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'https://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cc0c3c-3795-9e28-6803-0000e760984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/bin.sh","pattern":"[url:value = 'http://123.5.204.221:40942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0d135a-585b-2a5d-fa93-00008a03d33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/i","pattern":"[url:value = 'http://123.5.204.221:40942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b734057-29b6-6726-6b93-0000a4f01203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.143.36/img/1.jpg","pattern":"[url:value = 'http://107.173.143.36/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef0d699-7e6d-972c-0120-00006c6b56fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin","pattern":"[url:value = 'https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e31a98-7987-4d4a-4abf-00008e58e58d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ubua.duckdns.org/update.exe","pattern":"[url:value = 'https://ubua.duckdns.org/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0376fc8-e1f2-e4ee-43cf-0000311250f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f3f5541-08ef-fffd-6251-0000f484265a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86","pattern":"[url:value = 'http://36.255.97.21/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd09cb82-1f6a-1f8e-1e46-000047153cdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-3.2-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-3.2-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f501b041-9ec8-3d4a-5d72-000016ec3c82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm7","pattern":"[url:value = 'http://62.84.172.106/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c41dca-4ee3-eff8-1d01-00000b2b3c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-8.6-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-8.6-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c6d14a-0378-c811-40c1-0000635fde87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86","pattern":"[url:value = 'http://62.84.172.106/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a1876d-d892-cf75-5bc0-0000616a8097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_64","pattern":"[url:value = 'http://64.118.132.61/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50ffd0-035c-50aa-f8fa-000081b0dc42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/aarch64","pattern":"[url:value = 'http://64.118.132.61/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beeb5dcf-7bc2-c050-c606-000056488c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm","pattern":"[url:value = 'http://64.118.132.61/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61da7efe-b0d9-d053-2596-00009c9674a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm7","pattern":"[url:value = 'http://64.118.132.61/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb5d61d-46b8-0595-6465-00008ce1503b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_32","pattern":"[url:value = 'http://64.118.132.61/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b33eac3-86d8-12cc-f889-00007cde179c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86","pattern":"[url:value = 'http://64.118.132.61/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f281de3-85a7-bdd9-b7ba-0000950befde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02aa052f-0ad3-d57a-b424-00008c13fac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug.dbg","pattern":"[url:value = 'http://94.154.43.97/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3fb6315-1f0d-41e0-7ce2-00008a243776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86","pattern":"[url:value = 'http://94.154.43.97/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985f100-e904-1bb2-d4b1-00006403e284","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm6","pattern":"[url:value = 'http://94.154.43.97/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d6effc-8376-4a79-63ff-0000fefe574e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/m68k","pattern":"[url:value = 'http://94.154.43.97/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5ba787-bb7f-8a4c-cd2d-00000df3eab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6218904d-1228-9a09-53f1-0000ee194913","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm7","pattern":"[url:value = 'http://36.255.97.21/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9aee2a5-a8da-6f8d-cc15-000076e3c55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-7.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-7.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8968dd9-2201-74e2-9e47-0000e16f9bce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/Sakura.sh","pattern":"[url:value = 'http://23.251.34.31/Sakura.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9261dd1-e60c-1a41-4c49-0000555cf3a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/bins.sh","pattern":"[url:value = 'http://64.118.132.61/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbad84c-cf6b-9f87-30f0-0000efa32440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/ohshit.sh","pattern":"[url:value = 'http://31.77.227.111/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a461d7-b491-eb42-0f10-0000d1ed5bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/jaws","pattern":"[url:value = 'http://36.255.97.21/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d2bf2b-2aee-d13b-b67b-0000cbeeed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/d","pattern":"[url:value = 'http://62.84.172.106/d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e1975a-b645-74c1-7c4f-00007c502098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/bins.sh","pattern":"[url:value = 'http://176.65.139.199/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da49dc-ffe3-9f78-efdb-00003758468b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/0x83911d24Fx.sh","pattern":"[url:value = 'http://176.65.139.199/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--532284a9-2495-9bc2-26b4-0000a8503fb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/1.sh","pattern":"[url:value = 'http://181.214.136.12/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04acb624-97e8-609a-724d-0000a6cd4d6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/t","pattern":"[url:value = 'http://93.114.194.171/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a350e9ab-b051-9551-e5e6-0000c58ceedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44cc947f-c337-2bf5-0451-00002c24ab02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm","pattern":"[url:value = 'http://36.255.97.21/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1142373-785a-2803-d97d-000006b2301a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_x86","pattern":"[url:value = 'http://36.255.97.21/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a32d0-5628-586b-d27d-000002868c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mips","pattern":"[url:value = 'http://93.114.194.171/d/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf84786-6190-232e-4916-00001d9081eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.199/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99587d38-b19c-524d-5430-0000212f2f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.ppc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad7ecf-60f3-ff3e-6730-0000775e1f56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_i686","pattern":"[url:value = 'http://36.255.97.21/main_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee0ace4-0a78-2992-13ae-0000f8252cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_spc","pattern":"[url:value = 'http://36.255.97.21/main_spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1780e14-fc14-15bb-87d3-00002f049a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9920fbe9-5c7c-11b1-cc09-00009e63b6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee27cb7f-3f7d-d077-1d71-000026dfd1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d53d1e6-5da4-3e48-6a00-000033581d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86_64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--444f8b97-6a59-b9c1-e260-0000323ef61e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm5","pattern":"[url:value = 'http://36.255.97.21/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb36ce-92fa-9568-97ba-0000d18354aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mpsl","pattern":"[url:value = 'http://36.255.97.21/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a374b978-6437-8c79-3003-0000ccfbdc31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arc","pattern":"[url:value = 'http://36.255.97.21/main_arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3215c4d1-2db9-fdd2-954d-0000ba76ec3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_m68k","pattern":"[url:value = 'http://36.255.97.21/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd46da2d-fd27-627f-0085-0000208b59f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm6","pattern":"[url:value = 'http://36.255.97.21/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f4f0ea-204f-6fc8-dd0f-0000fe6fc799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_sh4","pattern":"[url:value = 'http://36.255.97.21/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f564bff5-e4d0-97d5-767f-00006efbe356","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sparc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3504e23b-7533-0cde-d16b-0000b76d1a9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2132e699-3e5f-36b9-53dc-0000c647c31a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a3db999-bb92-4433-3fe2-00006bdb9f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecec1b88-bcf8-3fb1-dd4d-00001bda6ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00826d7e-9ca7-345b-272c-000079fcf712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26c02313-4f09-ec2b-acdf-0000cfdbed70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c318941f-0a12-d31d-9194-0000e54d7668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7673e515-6be5-c461-1fd1-0000049e036c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.199/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa41eabb-9cc7-d555-8fba-000098373e95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm7","pattern":"[url:value = 'http://36.255.97.21/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d156fc35-b5eb-0b89-42e2-0000ecd73874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-i.p-s.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-i.p-s.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7721e546-4276-0ed2-b173-0000ef01a35c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-4.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-4.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8d170a-9776-79a3-60f9-00006f6bbbfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd24d11-c43f-29c0-2229-0000c4980ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.m68k","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ea4cf6-437b-c41a-9a51-0000592c4117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3786637b-901a-ad4a-a33e-0000e6d9dc59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm7","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5fd1c3-dec2-ef0a-0bea-00000468d5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd893234-7236-4b93-b328-0000ae0067da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/p-p.c-.Sakura","pattern":"[url:value = 'http://23.251.34.31/p-p.c-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8a5482-a458-a6ae-7ae8-0000c57d7893","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-6.8-k.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-6.8-k.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeaaa5d1-ee66-d998-97c2-00009d4e181d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0029aa53-309c-2df4-acea-00008cd61948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4bb3dc-aba0-6abd-8502-00005e03ec97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-p.s-l.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-p.s-l.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9bef7e-4005-bcd5-9aa7-00001422a506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/i-5.8-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/i-5.8-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5132fbfa-8f58-56c4-4e0e-000073bada0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0a9f6f-2b89-b089-e857-0000a1f1b694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sh4","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9880257-d6de-8e5e-e1a2-00004cd014d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm5","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e39f007-215d-8e16-c8c7-0000ba803ae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mips","pattern":"[url:value = 'http://36.255.97.21/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68ad6fd-462b-b993-3291-00009365ad3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562cbf0e-ef59-ceb6-0f00-0000af6db666","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mpsl","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca612bd-9d3c-c3c6-f809-00007eb15e6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_ppc","pattern":"[url:value = 'http://36.255.97.21/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2cdfba-b2fd-fa40-ac8e-000008c78b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3fe79c7-cec5-8445-401b-0000c46ed82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408153ed-9c1c-ca78-bd25-00005e65bb3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm6","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724557cb-c862-f35f-58e0-00009ac042f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/s-h.4-.Sakura","pattern":"[url:value = 'http://23.251.34.31/s-h.4-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e398f419-fbf2-f26f-4197-00006985e27d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mpsl","pattern":"[url:value = 'http://93.114.194.171/d/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44131cd0-597d-2335-4963-00001b366c59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb8be5d8-166d-6530-e185-00002e8f7c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-5.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-5.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356af70f-88a9-c1ec-9250-000009b0fd9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.i686","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1ec361-b2ad-d8f6-f089-0000a7bb5dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.spc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550ccc5d-2b9e-00f5-9780-0000feeb2c71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug_main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bccb8182-b833-b1e7-a7cb-000038e938ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19bf91e-40d0-3438-491b-0000406ddb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arc","pattern":"[url:value = 'http://94.154.43.97/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4952db-1d24-f3f5-7b02-0000f2275903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/ppc","pattern":"[url:value = 'http://94.154.43.97/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1bb08c-446e-98e5-c652-000072f9c0f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/sh4","pattern":"[url:value = 'http://94.154.43.97/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafadb2a-1418-128e-a673-0000fe088194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mips","pattern":"[url:value = 'http://94.154.43.97/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e82c196-0916-3c0a-d0bf-0000dcbf85e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm7","pattern":"[url:value = 'http://94.154.43.97/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db2f918-a6e4-82ba-b9f6-000006523faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64nosl","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5623d419-6b61-44e0-8342-0000a0b2ac6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm","pattern":"[url:value = 'http://94.154.43.97/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08ca0ba-c60e-2e34-2d48-000076b64d6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm5","pattern":"[url:value = 'http://94.154.43.97/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0fec82-2e0e-0192-e209-000074b32bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/spc","pattern":"[url:value = 'http://94.154.43.97/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8971b02d-5bc3-68a3-934b-000007247f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc5cce-4ac9-2bd7-41c9-0000f62c72dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa7c9a-b4c5-8e98-426d-0000b17b04eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0e9a07-ab62-8aa4-5440-00009d2f1c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe7680bb-1292-ce18-cc63-0000bf9818e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659b3b4b-76a2-c49f-6503-0000d3d6821e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c9d91c-12ef-6508-bc26-000053081be8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48290a85-3877-9481-717d-0000abd5ec6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a49908e-9cd5-3a15-a718-0000619c0040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee4ecd-65c6-35d9-8eeb-00004449ed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/kk2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f86b9d-ae86-7502-bfd5-000034d2a65e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/bin.sh","pattern":"[url:value = 'http://213.66.220.87:50871/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0057b9bd-6202-213e-79f5-0000f9f8f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/i","pattern":"[url:value = 'http://196.189.98.110:33070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b6690b-3d5b-015f-1d73-00006e1e6cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/i","pattern":"[url:value = 'http://182.121.106.64:52025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43b7cc0-568d-32ba-1c53-000057580ce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/exploit.sh","pattern":"[url:value = 'http://voltagec2.tech/exploit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94c6ad0-f3c3-3611-4329-00009987fee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/bin.sh","pattern":"[url:value = 'http://27.21.31.81:59239/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1885cf-8c48-5ddc-032b-00003b1d6094","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/bin.sh","pattern":"[url:value = 'http://113.233.65.130:37441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25674c8-a1a9-ae2d-eeac-0000a291caa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm","pattern":"[url:value = 'http://voltagec2.tech/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6cdbeec-586c-68f4-a0fd-0000cb1d5187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.52.247.235:47637/i","pattern":"[url:value = 'http://37.52.247.235:47637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b933b9-6f6b-4da0-dd5a-0000782fee78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.50.235:56719/i","pattern":"[url:value = 'http://115.63.50.235:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74fb5c99-a107-7a16-0672-00003ad5ff69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/bin.sh","pattern":"[url:value = 'http://140.237.36.213:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5539eee7-7360-07a0-272d-0000c723d5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/bin.sh","pattern":"[url:value = 'http://119.116.39.158:45878/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1057b5db-0b93-1173-b3fd-0000191701c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/i","pattern":"[url:value = 'http://110.37.106.220:47631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050b58cc-362b-8433-4801-00008973245b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/i","pattern":"[url:value = 'http://125.41.226.101:43998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c678046-d5f2-a0b0-a3bc-00006834d810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/i","pattern":"[url:value = 'http://42.54.158.77:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2011b9e3-db12-037a-f85f-000000651e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/i","pattern":"[url:value = 'http://213.66.220.87:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228c8606-1802-32ca-0e12-0000792cc9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/K1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/K1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ee3726-9b18-794d-0076-00001f0310c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.40.158.110:41707/i","pattern":"[url:value = 'http://125.40.158.110:41707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a6c733-ba93-ce86-fad9-000069555961","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9bacbe6-682e-6d55-876e-00005aa3bd52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.6.238:41787/bin.sh","pattern":"[url:value = 'http://140.237.6.238:41787/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6b592a-de54-ad59-5b9e-000070b5d8af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/i","pattern":"[url:value = 'http://115.56.159.152:47624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68012ea4-7f86-15c7-6c25-0000560789c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/i","pattern":"[url:value = 'http://125.43.44.201:48800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6e105d-5e42-093b-9b19-000070daa63c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/sh4","pattern":"[url:value = 'http://voltagec2.tech/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c566e2-7ee4-383e-528f-000086b9bbf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm6","pattern":"[url:value = 'http://voltagec2.tech/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3af1b9-de75-2ec1-9a70-0000f55289d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/bin.sh","pattern":"[url:value = 'http://210.208.106.68:36906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61c3aad-61a9-7800-c35d-0000147e094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.236.61:47227/i","pattern":"[url:value = 'http://175.165.236.61:47227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af22df9e-fd2b-aa3e-a380-0000d03b48cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/bin.sh","pattern":"[url:value = 'http://123.8.90.59:40206/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--553b6ac6-6b1f-9e3c-affb-00004f4dc500","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.214:33968/i","pattern":"[url:value = 'http://182.126.95.214:33968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c151982f-8caf-12de-b456-0000629325c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/bin.sh","pattern":"[url:value = 'http://115.55.246.222:57542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268590dd-6c2f-e41d-1ca0-00009db41e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/i","pattern":"[url:value = 'http://27.215.44.220:42289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3a50a4-73f3-d139-1a82-000056b0340b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/bin.sh","pattern":"[url:value = 'http://125.43.44.201:48800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11cc3758-65b5-2749-da03-0000940c1418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm5","pattern":"[url:value = 'http://voltagec2.tech/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8adeaca6-14c5-d862-108a-00004a5a68c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/bin.sh","pattern":"[url:value = 'http://119.189.160.169:47495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb88cd7-a68e-cfe6-a444-00002e3c8a8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/bin.sh","pattern":"[url:value = 'http://1.20.91.236:53593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1dc98c-5b57-894c-4325-00006567a768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/i","pattern":"[url:value = 'http://210.208.110.172:59880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1691f2de-2bb7-ff01-0e43-0000d2e37d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/i","pattern":"[url:value = 'http://42.176.120.191:54769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c130d3c-b8f9-24a9-517e-0000e81766a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/bin.sh","pattern":"[url:value = 'http://124.92.80.153:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2669e59b-221c-bddc-dd12-00001257cccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/i","pattern":"[url:value = 'http://119.116.39.158:45878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d218e0e-6224-8ae3-eb18-00001781cd12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/i","pattern":"[url:value = 'http://221.1.226.175:38386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7211825-d750-2491-bc8d-000004824905","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/i","pattern":"[url:value = 'http://221.202.17.138:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbb363a-987f-f02a-e1fd-00000825de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/i","pattern":"[url:value = 'http://113.233.65.130:37441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564626d9-30ce-be2a-6e99-00002a4f2cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/i","pattern":"[url:value = 'http://42.224.175.231:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcd748-086b-6789-5352-0000f08d74e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/i","pattern":"[url:value = 'http://222.127.220.233:54104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01c48b9-ff49-c30b-9195-000012581983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/bin.sh","pattern":"[url:value = 'http://182.121.106.64:52025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15bd153-f994-9a9a-3f09-0000fe16a994","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.214.37:48901/i","pattern":"[url:value = 'http://222.137.214.37:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f9578-f298-5caa-dad6-0000c2128c94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.66.105:43207/i","pattern":"[url:value = 'http://42.180.66.105:43207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f875f76d-9171-c6ab-cdb0-0000cfebefec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/bin.sh","pattern":"[url:value = 'http://120.84.213.21:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4fe5efd-2e34-269d-ed06-000037570a28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/i","pattern":"[url:value = 'http://42.230.40.119:58107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c646ef3-60f8-ebef-3281-0000f2556b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.180.159:41148/i","pattern":"[url:value = 'http://182.121.180.159:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93340659-88bd-0718-4dd6-0000e0f50331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/i","pattern":"[url:value = 'http://175.167.85.100:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9d476a-2dd4-3c7d-051d-000080b03dad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/i","pattern":"[url:value = 'http://222.127.154.48:44547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33995c16-dae5-cd9f-1aee-00007300a3e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.14:47408/i","pattern":"[url:value = 'http://125.44.219.14:47408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453258ea-b8aa-b968-419e-0000eab69641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7fd00e-84a3-bab1-3565-0000bf6ac12b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_64","pattern":"[url:value = 'http://64.118.132.61/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44829d46-62bc-11a5-95e2-00004738a2c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/duza","pattern":"[url:value = 'http://193.23.118.161/duza']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f7b297-becc-4e1c-a4da-0000f90040ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86","pattern":"[url:value = 'http://64.118.132.61/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5541a0a-8481-1edd-1e81-000025caafab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.52.185:33904/i","pattern":"[url:value = 'http://42.237.52.185:33904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0133601c-6270-acaa-43d2-00003b67150a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/bin.sh","pattern":"[url:value = 'http://115.56.159.152:47624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--269ca263-aecd-97f2-f94c-0000db6f31f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.232:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c3ebcf-8f42-b9e6-33b4-0000d1622d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/i","pattern":"[url:value = 'http://210.208.106.68:36906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c524c5a4-845b-7013-8d2f-0000a089770d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.238.30:45449/bin.sh","pattern":"[url:value = 'http://112.198.238.30:45449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95720121-fa82-71ed-4b75-00006ae948bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/m68k","pattern":"[url:value = 'http://64.118.132.61/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39197310-2bf4-fa63-b9bf-000088296412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3befa047-5c3c-61ff-29c3-00001f119dd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/i","pattern":"[url:value = 'http://123.8.90.59:40206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd87480d-74af-f05b-5225-0000b7d205be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/bin.sh","pattern":"[url:value = 'http://210.208.110.147:33487/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3469a2a-43fc-c462-e8e4-0000d5bd001e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/i","pattern":"[url:value = 'http://119.179.254.223:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39963611-572a-66eb-49ad-000079e22bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/i","pattern":"[url:value = 'http://27.21.31.81:59239/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cda29b1-07ee-4ce6-c2cb-000012aa7594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://86.98.154.146:19091/i","pattern":"[url:value = 'http://86.98.154.146:19091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2c9a8a-f841-a720-43bd-0000a1a2d596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/bin.sh","pattern":"[url:value = 'http://42.230.40.119:58107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec4cb60-3a7f-d2fd-eefd-000008a686dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/i","pattern":"[url:value = 'http://210.208.111.234:49323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2213f1b-fd36-9354-4d81-0000f0b233bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.114.109:46437/i","pattern":"[url:value = 'http://115.49.114.109:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9cff28-e344-3cdf-a8a6-0000a8b57006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/i","pattern":"[url:value = 'http://219.154.181.58:50132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a22ca06-5c04-8404-956c-0000148e4716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.62.97:34952/bin.sh","pattern":"[url:value = 'http://115.203.62.97:34952/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b37db2-c253-427e-ba04-0000fa558af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/i586","pattern":"[url:value = 'http://205.237.110.232/tvt/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c209735-b23c-d3e4-9fde-0000d3b85eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.146.164:54323/i","pattern":"[url:value = 'http://61.52.146.164:54323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d3e39a-2500-6685-656e-00006e7b5b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/bin.sh","pattern":"[url:value = 'http://221.202.17.138:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a513dc3a-7080-0166-2a12-000074b9ee80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/i","pattern":"[url:value = 'http://113.230.81.126:50462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c38b62-9929-eefc-c146-0000653f88b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/bin.sh","pattern":"[url:value = 'http://182.113.201.103:43353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c9e380-1de3-b7dc-3420-000082a8849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:52311/i","pattern":"[url:value = 'http://120.28.194.160:52311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1eb3c0f-76ee-6636-70d8-0000bb01403d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.138.83:40373/bin.sh","pattern":"[url:value = 'http://112.93.138.83:40373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff05c94-e723-4816-7381-0000a5dfb539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/bin.sh","pattern":"[url:value = 'http://175.167.85.100:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f8a84a-ec39-9817-7f20-00005cc301c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.30.36:60566/i","pattern":"[url:value = 'http://123.12.30.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a96d6c-0443-e8fc-21f1-0000cae279fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/bin.sh","pattern":"[url:value = 'http://222.127.220.233:54104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78af750e-bfd8-7310-8ea7-0000eac95b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/bin.sh","pattern":"[url:value = 'http://123.14.193.241:34414/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aab946e-92d0-c271-3133-0000e21696f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.216.110:54566/bin.sh","pattern":"[url:value = 'http://113.228.216.110:54566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa14f7b-b13d-6eb8-ab51-00007ae20231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.197.66:51494/i","pattern":"[url:value = 'http://61.137.197.66:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e80354-5b5b-b2c9-48b6-00001a3ffa8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/bin.sh","pattern":"[url:value = 'http://125.41.226.101:43998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86c903e-8087-f03b-c451-0000efc62a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_32","pattern":"[url:value = 'http://voltagec2.tech/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b4df57-d89d-f8db-f317-00005729d36d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/bin.sh","pattern":"[url:value = 'http://210.208.111.100:38107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7748cfe7-ce07-d3ad-f8f5-00006cbe81df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/bin.sh","pattern":"[url:value = 'http://196.189.98.110:33070/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d408dcec-55aa-3533-2768-000077d86e9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/i","pattern":"[url:value = 'http://27.204.233.111:38853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ecaea-2783-f302-45de-0000cb1c6321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/bin.sh","pattern":"[url:value = 'http://42.54.158.77:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef56a46e-db86-c983-868d-0000fe5c2e47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.40.36:42435/bin.sh","pattern":"[url:value = 'http://115.56.40.36:42435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b45b79-70dd-b84f-1f75-00003a15e58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.131.65:54677/i","pattern":"[url:value = 'http://182.120.131.65:54677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a22d61-375f-1d4f-717d-0000a5917cd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc440","pattern":"[url:value = 'http://voltagec2.tech/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0654293c-b759-a35c-0cb7-0000f147535a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/i","pattern":"[url:value = 'http://119.166.194.8:35798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a1b6cd-2722-a104-18aa-00007e4fda54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/bin.sh","pattern":"[url:value = 'http://42.86.172.171:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3cf20a-f4a1-df3b-8fa2-0000f0043fca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc","pattern":"[url:value = 'http://voltagec2.tech/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfc2a32-5709-bf45-49ae-000008f90662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.42.71.239:58276/i","pattern":"[url:value = 'http://115.42.71.239:58276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7e8757-447f-d24b-0b3d-00005efa2f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/bin.sh","pattern":"[url:value = 'http://42.235.75.164:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96566111-e53e-0470-8f45-0000177c2258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.80.60.21:60792/i","pattern":"[url:value = 'http://39.80.60.21:60792/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f24ec9-56f2-8dc1-e6f4-000057411953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:49323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fc73e6-5a80-7977-1158-0000e9007d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/i","pattern":"[url:value = 'http://115.55.246.222:57542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1b7347-f0f5-cdba-465d-00000fd43d18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/i","pattern":"[url:value = 'http://110.39.249.174:41741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664350df-dd4b-6141-bb29-000027cd7abb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/i","pattern":"[url:value = 'http://27.215.126.58:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ffb1ce-2932-5941-f455-0000bf9b8e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.215.125:39910/i","pattern":"[url:value = 'http://120.84.215.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a6be4e-60d9-5d6a-1e2a-0000cb816038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/i","pattern":"[url:value = 'http://42.235.174.78:56482/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f49da18-a0ee-7caa-8c4a-000092946398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/i","pattern":"[url:value = 'http://210.208.110.147:33487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b9ec94-5805-4678-5735-00004e1ae2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.78.13:52046/i","pattern":"[url:value = 'http://175.173.78.13:52046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f802dd-4ba0-e666-774e-0000f077fb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/bin.sh","pattern":"[url:value = 'http://115.148.236.155:60439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9480f01c-23d7-f74c-7f22-0000184e7db3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/i","pattern":"[url:value = 'http://115.148.236.155:60439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd36c29-d021-5609-74ee-000015789ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ceb2a5d-869d-1657-4b0d-0000c8a10ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_64","pattern":"[url:value = 'http://voltagec2.tech/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b7ff20a-16ba-73de-0ba6-00001fd12fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/i","pattern":"[url:value = 'http://115.50.150.5:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dd0327-70f1-7b0d-4608-00001a3be885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/bin.sh","pattern":"[url:value = 'http://119.109.140.49:40757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8cf33e-8d86-c1c8-14fa-0000011cf02d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mpsl","pattern":"[url:value = 'http://64.118.132.61/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3284e67-244f-f2b5-a636-0000e2a15299","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm5","pattern":"[url:value = 'http://64.118.132.61/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9b0089-92bc-7ca8-735e-00007d4f2f52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/i","pattern":"[url:value = 'http://219.157.52.254:39042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22eb73-8122-5a6c-f8ee-0000ca2bf8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a13f3a6-bdbb-5b66-9662-000092ac9786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/jaws","pattern":"[url:value = 'http://api.mineblack.lol/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3012f270-610f-df1a-cea8-000075b4dfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/i","pattern":"[url:value = 'http://125.110.61.156:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6622aed1-ff53-0166-cbdf-00009dd9ca4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d2966a-bc11-71a1-6806-0000fef0953a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.198.5:48196/i","pattern":"[url:value = 'http://182.114.198.5:48196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba4cc8-6ed2-a597-b298-00001cb2d8e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mips","pattern":"[url:value = 'http://voltagec2.tech/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc0cafcc-5413-61cc-f059-00004ceac67b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.149.19.3:33747/bin.sh","pattern":"[url:value = 'http://116.149.19.3:33747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad731f5-d590-898e-9268-00009993b42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/bin.sh","pattern":"[url:value = 'http://110.39.249.174:41741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e365e46c-0d0d-97c4-627f-0000b271d436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/bin.sh","pattern":"[url:value = 'http://222.127.154.48:44547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d853336-9639-4bf9-2096-0000bd29ce2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/bin.sh","pattern":"[url:value = 'http://221.1.226.175:38386/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f917610e-06f8-7dc7-ea0e-000001ddb77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/sh4","pattern":"[url:value = 'http://64.118.132.61/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e688a01-588d-0491-e985-000077b1b6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mpsl","pattern":"[url:value = 'http://voltagec2.tech/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ff7b2d-4298-9169-f066-0000252adf55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_32","pattern":"[url:value = 'http://voltagec2.tech/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5000b-a788-023a-9655-00002843bccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/bin.sh","pattern":"[url:value = 'http://119.179.254.223:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e6e1165-99fd-ae30-17d6-000043b923a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/aarch64","pattern":"[url:value = 'http://64.118.132.61/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8ab5a9-e19f-a91a-3d65-0000b600139f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/i","pattern":"[url:value = 'http://182.113.201.103:43353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--442f059b-fb64-e5b4-3366-0000d396dbe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm","pattern":"[url:value = 'http://64.118.132.61/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8bec14-7aa2-18fe-8cfc-000067f8a8f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/bin.sh","pattern":"[url:value = 'http://136.60.32.162:36863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f895a9-73dc-a4a4-94a5-00009d8f27b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/bin.sh","pattern":"[url:value = 'http://219.157.52.254:39042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c242ab-6a4d-85e6-6349-0000967e79b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.195.182:57009/bin.sh","pattern":"[url:value = 'http://182.114.195.182:57009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a21d-761a-8128-f5c0-00008edbab6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.86:37512/i","pattern":"[url:value = 'http://115.48.149.86:37512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fb9466-5e97-ac4e-205a-0000876e9610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/bin.sh","pattern":"[url:value = 'http://219.154.181.58:50132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a53c21-437b-0959-ce62-000018b647d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc440","pattern":"[url:value = 'http://64.118.132.61/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cf4569-ea38-8e58-a61f-000035a5d1e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/bin.sh","pattern":"[url:value = 'http://125.110.61.156:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e933a64-b3f8-3c67-02bb-0000f7073aab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/bin.sh","pattern":"[url:value = 'http://27.215.44.220:42289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bfb37ce-4de5-a4d8-75d5-0000d52f757f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://43.252.159.78:57590/i","pattern":"[url:value = 'http://43.252.159.78:57590/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1292aebe-c498-3d49-b2e3-00001533f5a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/bin.sh","pattern":"[url:value = 'http://119.166.194.8:35798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af54194-18f9-8c36-c11b-00002ad92d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/bin.sh","pattern":"[url:value = 'http://110.187.193.166:37676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2b67d0-df90-7b0d-8a5e-0000ffff7471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/bins.sh","pattern":"[url:value = 'http://voltagec2.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278ec3c4-b1d2-715b-bf78-0000880751bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86","pattern":"[url:value = 'http://voltagec2.tech/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5d85d1-859d-4a6c-1d4a-00002b135b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/aarch64","pattern":"[url:value = 'http://voltagec2.tech/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ea5f2f-16f4-2b00-a082-0000ba9b0ea6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm7","pattern":"[url:value = 'http://voltagec2.tech/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c357e4-b15d-14dc-bc71-0000ad0a65b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/aarch64","pattern":"[url:value = 'http://voltagec2.tech/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa8dd8c-f262-0b4e-e978-0000f0c2370d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.43.20:36177/i","pattern":"[url:value = 'http://123.14.43.20:36177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7e9908-82b8-7523-64ca-0000ed5b7912","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.x86","pattern":"[url:value = 'http://api.mineblack.lol/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab939a43-50dc-5c79-b840-00006402d6f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/mipsel","pattern":"[url:value = 'http://205.237.110.232/tvt/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95e35f7-6f84-d097-2da0-00006a1f9e67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mips","pattern":"[url:value = 'http://64.118.132.61/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c78c14e-e268-24a2-b0fc-0000024dfa29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_64","pattern":"[url:value = 'http://voltagec2.tech/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211fdd-1d08-6b07-aa02-0000f014fd77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm6","pattern":"[url:value = 'http://64.118.132.61/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e04f32-83c4-a35c-c67e-00000472c5f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.192.208:40793/i","pattern":"[url:value = 'http://219.155.192.208:40793/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a2b4c1-28ba-85c3-6150-0000dc6a1076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/i","pattern":"[url:value = 'http://42.4.25.20:34409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78dc129-d2f0-c522-8b5f-0000820221b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm","pattern":"[url:value = 'http://voltagec2.tech/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02557625-bf13-d6dd-22c1-0000a894baac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86","pattern":"[url:value = 'http://voltagec2.tech/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--285eeb8c-3858-1295-f71c-00002d00f1b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/i","pattern":"[url:value = 'http://42.52.204.44:32770/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c476f817-70af-71c8-8914-0000881c4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/bin.sh","pattern":"[url:value = 'http://42.4.25.20:34409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc77473b-1fcb-48ab-fca0-0000ad11727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/bin.sh","pattern":"[url:value = 'http://27.204.233.111:38853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6796781e-19f7-7a18-d53b-00001c440e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/m68k","pattern":"[url:value = 'http://voltagec2.tech/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96b817e-7257-b6c1-48b9-000052e11187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_32","pattern":"[url:value = 'http://64.118.132.61/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d262f4b-fceb-4cd8-0ddb-000048a89a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm7","pattern":"[url:value = 'http://64.118.132.61/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d5b28b5-7526-e918-a86f-000096075fee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.arm7","pattern":"[url:value = 'http://api.mineblack.lol/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c458359-e8ab-2dbc-46ec-000081032e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc","pattern":"[url:value = 'http://64.118.132.61/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc25674-9fab-0fd7-1803-00003e05dc93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm7","pattern":"[url:value = 'http://voltagec2.tech/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e105ba2d-58cf-42c3-0d26-0000aaa32241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://121.5.26.199:9696/linux","pattern":"[url:value = 'http://121.5.26.199:9696/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff95c4b-9ca1-b091-06e2-00005ad67fa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/tuess/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/tuess/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6c70ca-a74c-cf5b-8560-0000037502d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://seniorsushi.com/PPK/RAWFILES.exe","pattern":"[url:value = 'https://seniorsushi.com/PPK/RAWFILES.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393701fa-595b-1ff7-f5b2-0000ed8327df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Volcano9.exe","pattern":"[url:value = 'https://rcf.co.mz/Volcano9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49aae566-8f0e-db37-783c-0000ad26bf2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/bin.sh","pattern":"[url:value = 'http://196.189.35.172:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebf63c4-1b69-5185-65b9-000077deed15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/i","pattern":"[url:value = 'http://196.189.35.172:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc00dd35-b1db-f352-93bf-0000e240d94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/bin.sh","pattern":"[url:value = 'http://78.178.118.193:52357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25586b37-de0d-350a-d71b-000036ebdd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/bin.sh","pattern":"[url:value = 'http://182.121.179.166:53602/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c772fa8-94c6-954d-3917-0000ff6095a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/sh4","pattern":"[url:value = 'http://176.65.139.196/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb2d9d88-c284-bfe1-61a6-00009a60a77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmpsl","pattern":"[url:value = 'http://176.65.139.196/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67bf6573-ed41-23d2-2222-0000e195a23f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/px86","pattern":"[url:value = 'http://176.65.139.196/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d36f97-e6e4-9663-ce4d-0000f1951fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pm68k","pattern":"[url:value = 'http://176.65.139.196/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5925cdff-ea40-017a-7f63-00007fbe0c5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/ppc","pattern":"[url:value = 'http://176.65.139.196/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7497fc31-ba7f-424c-dd11-000007bd622b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/x86","pattern":"[url:value = 'http://176.65.139.196/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a0d54bd-dc95-2e42-6a9c-00009996cc4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pppc","pattern":"[url:value = 'http://176.65.139.196/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5fb6ea-9cc3-ecd3-cc78-0000194855bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/psh4","pattern":"[url:value = 'http://176.65.139.196/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd80716b-531e-9f10-00ac-00006b68aa25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm6","pattern":"[url:value = 'http://176.65.139.196/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c83aad-154d-3881-62af-000095c01f71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/px86","pattern":"[url:value = 'http://176.65.139.196/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c8e71b-9d41-ea70-8c20-0000608526c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pm68k","pattern":"[url:value = 'http://176.65.139.196/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9cc971-5bca-c66d-9bdb-000042c4f46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm7","pattern":"[url:value = 'http://176.65.139.196/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eff5b41-5cae-5d2b-f8ae-0000f163c935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmips","pattern":"[url:value = 'http://176.65.139.196/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267d27f-b4ba-05b5-6f6e-0000cb033927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm","pattern":"[url:value = 'http://176.65.139.196/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce41a38-92f9-499a-6d11-0000c9442db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm","pattern":"[url:value = 'http://176.65.139.196/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4828f4-fe74-5ee9-4716-000063e1f976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm5","pattern":"[url:value = 'http://176.65.139.196/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67297807-c0b7-b840-b213-0000546d38de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/kla.sh","pattern":"[url:value = 'http://176.65.139.196/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8346ac84-60f3-2683-30c7-00008f47e131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/kla.sh","pattern":"[url:value = 'http://176.65.139.196/bins/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f28e934-9859-1874-d58b-00006d1de8f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/psh4","pattern":"[url:value = 'http://176.65.139.196/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31dc7ead-462d-8084-7261-00001b0f412b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/sh4","pattern":"[url:value = 'http://176.65.139.196/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35362690-d143-5899-3c54-00000501ebd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm6","pattern":"[url:value = 'http://176.65.139.196/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1267b2-eabc-0fed-0f0a-0000eba9e352","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/m68k","pattern":"[url:value = 'http://176.65.139.196/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa361504-397e-1a29-65f6-00000b709e55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.196/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914f4b3d-99e6-2419-9db4-00002d2bf933","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm","pattern":"[url:value = 'http://176.65.139.196/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec95ad-cc3f-6947-b434-0000805c5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mpsl","pattern":"[url:value = 'http://176.65.139.196/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--324649d8-616d-9979-ac06-0000c9e831fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm7","pattern":"[url:value = 'http://176.65.139.196/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42311606-529f-e6e0-7b7e-0000bdbd8cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm7","pattern":"[url:value = 'http://176.65.139.196/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8741fd-d890-e927-b2bf-0000d3d4cd40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm7","pattern":"[url:value = 'http://176.65.139.196/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3f772a-d85f-2ca0-55c4-000017b44438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm5","pattern":"[url:value = 'http://176.65.139.196/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--693cad34-8541-9de6-e229-0000e3d2b6a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/x86","pattern":"[url:value = 'http://176.65.139.196/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da65386c-db5d-2b3b-1053-00009ffc5e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/m68k","pattern":"[url:value = 'http://176.65.139.196/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9bf9e7-a495-185b-9539-0000fa78930f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm6","pattern":"[url:value = 'http://176.65.139.196/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63e5364-6ff2-36bf-fb16-0000eb5f3588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mips","pattern":"[url:value = 'http://176.65.139.196/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2592a85d-8121-5fc5-99b1-0000e8cd3ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm5","pattern":"[url:value = 'http://176.65.139.196/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448920d1-e27d-6935-68c1-000079dd05cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm5","pattern":"[url:value = 'http://176.65.139.196/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7a0b63-99be-9b0e-b798-0000edc37104","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pppc","pattern":"[url:value = 'http://176.65.139.196/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2108da1-82a4-464f-a2fb-0000bf568469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm","pattern":"[url:value = 'http://176.65.139.196/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96490cba-22de-adbe-e077-00009f0a88c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mips","pattern":"[url:value = 'http://176.65.139.196/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe4d3cd-66ec-9b0e-24a9-00006073f01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmips","pattern":"[url:value = 'http://176.65.139.196/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4541794e-75f0-8615-ecf1-000071545698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm6","pattern":"[url:value = 'http://176.65.139.196/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448e9cfa-63a0-e6af-78e3-00009bd1d8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/ppc","pattern":"[url:value = 'http://176.65.139.196/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239bca73-3a35-3ad0-799b-0000f409e68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mpsl","pattern":"[url:value = 'http://176.65.139.196/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9db60a-708e-6577-a2fc-0000c5c02623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/i","pattern":"[url:value = 'http://78.178.118.193:52357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ae2653-ef02-93ba-7e77-0000683cd87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b07d08f-5995-ecdf-2cc4-0000014349e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad85dc3-3aa5-ad23-f680-0000e0821482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153449b0-5006-1757-c1b5-00003127bb52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/bin.sh","pattern":"[url:value = 'http://89.189.181.54:34451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0a9b0a-7527-58d3-1f66-00008b817ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedf6783-e234-1c1b-d7fc-00002bd5d2fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc80765-a901-a61e-1ab7-00006094903f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f46915-3d78-0cee-4893-0000e074c258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53cd915-927a-cdd8-8bf6-0000910e2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b5e141-8cb1-b3f6-a8d7-000079402791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69a777e9-2ae8-6c21-f1b4-00007a897792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49674a84-bcb1-f2c2-4525-0000cb0aa5cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277012fc-5574-8c9d-5993-00006059ced2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba6d34e-87da-0790-0367-00001bd2758e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79044b1d-e371-b948-8289-0000f4682723","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be8df69-d40b-b142-f41a-00001b0106e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a809f73-283d-3b79-4be4-0000b9a08628","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a42031c-a99b-b590-7834-000052b56cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34600d7-ae75-621d-91b2-0000e30f820d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569eb7db-40d9-a9c6-4e8b-0000c9991915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cefefff-da79-42b3-5c7e-0000a3bd6185","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e70316-e8b9-b212-01ee-0000f99ebe67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef43119-df29-e60a-ec2e-00009b0cec78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c4cd30b-60bc-8e86-5735-00002d5c3134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea0477f-86d2-03aa-0ec1-0000c23510f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e6be45-11d4-6b81-02a1-0000b108ce6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1269adc-9621-8439-df93-000029466e26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bcf103-8deb-7bdb-2401-00003940d44f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af90c5d5-9485-7b0a-00a6-000039b60295","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d1b45-9830-a92e-3585-000055a0bdba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be769a67-472e-f040-3ff3-00008b262e2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a431a2-b01e-df17-5992-0000396cac72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb72316f-e406-650d-8771-0000cfabdeaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb247830-6841-1b05-8bf1-00000bf8b7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c4aba9-5cc9-bf6c-4570-0000f3254059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--addfdd8c-b367-e4bb-1f05-00003ea3d3f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--761c1ca5-9c71-7503-50a2-0000d9b3db41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54212f93-dcfc-3e3a-9be3-000055566b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfddbfd7-8608-5c83-a835-0000e78f7aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/bin.sh","pattern":"[url:value = 'http://39.74.53.25:55617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--375ad0a8-73a2-b14e-d7f6-0000299b34b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7501f9-c614-7609-7838-00007717b9cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227b60d5-7356-6aa9-95e1-0000dd1e7144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd1d41e3-4d72-af5f-1ae3-0000d5b63907","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6034b279-d4a2-78fc-0293-000058112e9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--794c7000-0b6f-7f19-deaf-0000a423319a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb30a77c-b315-bbd4-dec7-00006e02cea3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce99958d-d725-3079-eae0-0000987e980c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356044d6-78e9-186b-991f-0000a4d5e740","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b0eeee-d539-4e5e-16ed-00005c96d50b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9503d77-dd80-f16b-4335-0000a44b2288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da335a2a-666c-36b3-2790-00003e28528a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9eb6c9-a66b-fe80-bf22-0000cf205fd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c2aa6-9d7a-c240-0e71-00002435b527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e20cb9-7955-88d3-0560-0000dc484cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c888a7b-a5d6-9732-47dd-00008eddb990","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433a0b90-514e-bb2f-31a8-00002c9dfd64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad346abc-079c-c355-0b73-0000869435ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd8fec8-a5e1-2296-59d3-000069fd142c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1788505c-c690-dbb0-dd36-0000c808c42b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b183114c-aa57-affb-bc39-0000aa9ec031","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6aa504-07cd-5aaf-799b-00008d682d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4477cbd8-c5d9-f8d5-d84f-00009183cb78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1564c428-5cfa-a3b5-2cc1-00002761e5e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c11cde94-44e9-7137-4697-000005d6e19d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--140c8432-b63f-005f-6f3f-000085c06520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ce185d-4570-190a-1c25-00006ed58fd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d30ea42-6a20-2699-d509-000005203747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ba640-8893-bab7-f7e0-000080085b29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9978e-b44d-265a-489c-0000f80b355c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbb75d9-5fd3-6f75-46d5-000078d5acaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--563b3c4b-2a51-89cf-3b5c-00004a41b702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6263f4be-101b-e6a5-dc0b-00009fdd828d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fad5a1f-b326-d858-feda-00000b3fcb17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mips","pattern":"[url:value = 'http://176.65.139.234/rebirth.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd27035-f6de-2ae6-e38e-00009134a807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm6","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37d0cfc-b255-1624-a8dc-0000caa98d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.ppc","pattern":"[url:value = 'http://176.65.139.234/rebirth.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b178a3e-f416-3e40-5e22-0000983c7839","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62feeab-7d9f-e83a-6b23-00004a7714a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.sh4","pattern":"[url:value = 'http://176.65.139.234/rebirth.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecf3d32-49c6-c0c4-9855-0000b2aae321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.x86","pattern":"[url:value = 'http://176.65.139.234/rebirth.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84413fb4-7752-1955-a66c-00006f2448dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/tplink.sh","pattern":"[url:value = 'http://176.65.139.234/tplink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7f9cd6-0e6e-6b0d-5dc7-0000603ca55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mpsl","pattern":"[url:value = 'http://176.65.139.234/rebirth.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd540a3-fded-6fe6-8db0-00002988cf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm7","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33816ec9-07d1-dbfe-f6a6-00000bc91dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.m68k","pattern":"[url:value = 'http://176.65.139.234/rebirth.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45db218f-c2d3-a306-b78d-0000838107e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm5","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d8d6c4-bb64-ea80-6e03-00003dba43bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmips","pattern":"[url:value = 'http://176.65.139.229/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf4e212-bd85-9464-0f3c-00003d4c9561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pm68k","pattern":"[url:value = 'http://176.65.139.229/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c893c-359c-7aff-a62c-0000caffa550","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pspc","pattern":"[url:value = 'http://176.65.139.229/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--486806ab-1bc4-3bca-d614-00003468b98b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/px86","pattern":"[url:value = 'http://176.65.139.229/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--430a100d-3407-e7c3-630a-000056b92df1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.229/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1088d532-6cf6-d873-5b76-0000ccb54e08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/psh4","pattern":"[url:value = 'http://176.65.139.229/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65da3765-58a9-ef35-6fa2-00004c6bd7fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pppc","pattern":"[url:value = 'http://176.65.139.229/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a7fcee-461c-9023-180c-0000a7b120ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm6","pattern":"[url:value = 'http://176.65.139.229/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb0b1a7-83bc-08ce-6135-00001efe2293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm","pattern":"[url:value = 'http://176.65.139.229/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a0cc78-d7ba-4bd4-ee51-00001f0d47ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm7","pattern":"[url:value = 'http://176.65.139.229/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccaead54-cc52-e0e6-d5dd-0000b5048f45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm5","pattern":"[url:value = 'http://176.65.139.229/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5ba16c-3998-8365-bc40-0000fe1e7292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/cat.sh","pattern":"[url:value = 'http://176.65.139.230/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626c3519-9914-9e07-a0fd-000001b432f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/telnet.sh","pattern":"[url:value = 'http://176.65.139.230/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517b373a-044f-7b71-aa6d-00008a5a2d39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv4l","pattern":"[url:value = 'http://176.65.139.226/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e56560-1a04-5bd1-bdb1-0000744b07c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.i486","pattern":"[url:value = 'http://176.65.139.226/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4860067b-4984-02ae-6cd4-0000b73a0489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv5l","pattern":"[url:value = 'http://176.65.139.226/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4a79f8-b521-49c6-1aee-000027550d7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sh4","pattern":"[url:value = 'http://176.65.139.226/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--634d55b8-76a8-ab59-521e-0000f09a7e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv6l","pattern":"[url:value = 'http://176.65.139.226/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a5664f9-f88c-f683-bc13-0000cdfa57e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv7l","pattern":"[url:value = 'http://176.65.139.226/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d90b10-7372-bb3a-d342-0000f4ab55a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.m68k","pattern":"[url:value = 'http://176.65.139.226/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf76a09-15a5-b300-aeb0-0000476c9aa8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.x86_64","pattern":"[url:value = 'http://176.65.139.226/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4fbca8-44ba-e7a7-d6cb-00008d0ef4be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/cat.sh","pattern":"[url:value = 'http://176.65.139.226/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117cb335-c0ee-15ea-8488-0000408da2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/telnet.sh","pattern":"[url:value = 'http://176.65.139.226/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d8425-7515-3fbf-0052-0000ebaee0d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sparc","pattern":"[url:value = 'http://176.65.139.226/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9474e9d-38e2-5815-eac2-000087ffd84c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsrouter","pattern":"[url:value = 'http://176.65.139.226/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ca306a-1a2c-c41d-4f8b-000015c116d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.arc","pattern":"[url:value = 'http://176.65.139.226/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102c0c7c-8ec6-f989-2853-000037f0f765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.aarch64","pattern":"[url:value = 'http://176.65.139.226/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449920a8-1f7c-38ef-9b9d-00003f4a4670","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.powerpc","pattern":"[url:value = 'http://176.65.139.226/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df53fc6-f292-c1ea-00c9-0000f45d837e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mips","pattern":"[url:value = 'http://176.65.139.226/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3691706e-a15c-572d-3182-00001e087996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsel","pattern":"[url:value = 'http://176.65.139.226/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51159c22-e7e9-6a5f-f24c-00007f96f68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.aarch64","pattern":"[url:value = 'http://176.65.139.230/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5a9fed-e454-339c-3695-0000282b2878","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.arc","pattern":"[url:value = 'http://176.65.139.230/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf5e34c-bf80-f8d1-d6c2-00003572979d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.i486","pattern":"[url:value = 'http://176.65.139.230/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1281c011-f8d2-d449-542f-0000b8d7e803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/i","pattern":"[url:value = 'http://182.121.179.166:53602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec5c4fb-06f2-c946-af67-0000097ffd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d145ba-bf54-15aa-977c-0000406567b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56913139-2694-b7f5-3b2b-00009e993f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6b2c4a-5d19-2389-612d-00006a2a9e0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_213534.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_213534.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--737476d2-2c2f-8073-8352-00005476cfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.30/mb/crypted.ps1","pattern":"[url:value = 'http://217.60.241.30/mb/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03336b5d-551e-6ccd-88a2-0000a9cb2b34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8787254-cecc-ce45-d52a-0000dc142150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1186804b-ec51-e961-0ac9-0000b7e199c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcadee3-a35a-53d2-1671-00003bd8e813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72c0c84a-601e-915d-dc07-0000113cd23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ad4879-ae08-1b52-978a-00003f910c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f27e0ef-38e1-9e69-6896-0000adbc94cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/gpon","pattern":"[url:value = 'http://176.65.139.242/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a159310-8634-d61a-612e-0000dfe1dbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33a738de-a313-9eb3-83e2-00002c4cd717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26810e4c-71a4-29ef-ab62-000089caaf14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check1.sh","pattern":"[url:value = 'http://176.65.139.211/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55e9ec6-1aa1-78aa-9961-0000024574fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check.sh","pattern":"[url:value = 'http://176.65.139.211/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86b9dfc-5476-9676-ad3a-000056278345","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto1","pattern":"[url:value = 'http://176.65.139.211/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c2c114-0c04-cd72-10b0-000048d20bd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa2d975-08ae-db15-d97f-0000ce6e5358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva.sh","pattern":"[url:value = 'http://217.60.195.187/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ca5c95-c2c6-4761-3763-000062110617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.211/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae7aec13-a996-741f-04be-0000a80d7ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4faa581-950c-1564-d4ec-00009a996743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db610d1-28fe-17a6-3045-000010fd1e6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac1a7618-2b93-b3c5-ad52-0000624490c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db74e141-10fa-cb18-f995-00009523d50a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6953db11-2dac-de59-5729-0000793c901a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7440b-6cf9-5e64-e5db-00004fef47ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c53b749-2429-e8b7-2931-0000d2dbcbcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14f717e-cd21-c80a-f122-00007a5e1493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/gpon","pattern":"[url:value = 'http://176.65.139.243/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad06ab9-655d-3f2e-5f3b-00002738d1c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/dddd.sh","pattern":"[url:value = 'http://217.60.195.187/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dc56bf-7931-24ea-748d-000059f098c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto","pattern":"[url:value = 'http://176.65.139.211/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0793a331-c3b4-fa49-c975-00003df3e7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.211/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b12e49-041b-de75-9c05-00003c5c7952","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e223d12-9b99-903c-46e7-0000545c3b74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4d9be0-7459-5f17-dec4-0000c74cfbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eac564d-46b9-419c-4f1f-0000bfb54e12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a847d6-4e00-221d-577c-00001a47feb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8886e21-f91b-caac-b80d-0000d5e424fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad70f7f-b7e8-38ee-d7b9-000034f43111","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e18687-f5dc-9ea8-1690-0000aad8a5b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bf416b-b82a-34a1-d79b-00000248b182","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fe15b1-c01f-d1b5-ba43-00005d5ae804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c06b41-c60a-d47b-c800-00009843d292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ccccc46-d917-16e4-90e6-000075fca239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c2d01eb-8e48-dae0-9603-00000d051787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a45af7-9019-8fc6-3cb1-0000d512f220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.97/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131e6783-4739-e408-dcab-0000c7b62067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbf4f65-d33b-38e0-b9d5-00009655b1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98b0045-e5ef-b9ee-16ea-0000f84d50d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf0749d-1cd8-e3d1-b928-0000f753208f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb952cec-a2b4-1bee-75db-0000edda60b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b871fd-a044-5fab-7913-0000baf4d6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ca332-efb4-b58f-0e7c-0000af0a44c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traff","pattern":"[url:value = 'http://176.65.139.211/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b6ca8-0da1-9392-dd95-000046e9949a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ffaa2e-dc48-d2b2-45c5-0000bf4f95d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c154e589-6954-5c95-3708-0000559df724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bec5f97-1084-b514-8bdf-000098b50448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d597cc0c-6e23-431e-7626-0000f44822ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/nvidia.sh","pattern":"[url:value = 'http://176.65.139.211/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a45b3d-3335-5ede-a2d9-00005031d015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664c85d4-e0dd-449f-eb53-00004768b991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4544682-763d-9c91-4b7f-0000dce2f78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5aa8e8-82fd-abaf-adf8-0000bee74ab0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3eb610f-6dfa-6bd2-d55d-0000b4146376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b364d0-c7a1-9211-07cd-00002a063c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.97/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17f95a8-9b8b-8c78-78a0-0000ef915b65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/loli","pattern":"[url:value = 'http://176.65.139.211/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ef541d-d7bd-abbf-7929-00000eea1262","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/gpon","pattern":"[url:value = 'http://176.65.139.241/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c1173-98b2-4076-b553-000093c5adc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/bolts","pattern":"[url:value = 'http://216.9.226.120/nuts/bolts']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6105def3-025c-0783-aa1c-00002c259458","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traffaarch","pattern":"[url:value = 'http://176.65.139.211/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63b0031-5303-04ae-7e79-000060d4238b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71441c24-55fb-b2b1-05e4-00005cf47337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a212ad88-d76d-6efe-d56e-0000f340bcd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e332d42-7cd2-0961-dfb4-0000189227e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702c5c3e-7f39-ab79-2087-0000fe55f3ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc755d9-bd52-f957-c9a4-0000b4e2b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb87ff3-fdda-239c-e8c7-00002ee9d6bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ec41b2-117d-523b-fc16-00007272bfe2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/gpon","pattern":"[url:value = 'http://176.65.139.237/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab062688-dcb9-7fc3-cb39-000031ed292c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/gpon","pattern":"[url:value = 'http://176.65.139.238/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a23c6e9-7c46-d66c-599c-00006d82af21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/1","pattern":"[url:value = 'http://176.65.139.211/1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d031e7-afed-588f-bd46-00001855562f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d24bb0-2a38-b831-3bc4-00004a789eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/poop","pattern":"[url:value = 'http://216.9.226.120/nuts/poop']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9f6898-f1a6-6a7a-ab3d-0000cae2c311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i468","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5362f242-f7be-1552-ee7d-0000025e9f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86_64","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9466f47e-275e-4c19-0384-00007e18e0b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mpsl","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ce9269d-a27e-43d1-94b4-00001bb5b799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211:3000/watcher-script-aarch","pattern":"[url:value = 'http://176.65.139.211:3000/watcher-script-aarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc862c46-b8c8-5479-7f17-0000bd8bf9ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc280b-d38c-aef4-baa6-000037ac8a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm7","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d980661-806e-5a3a-6696-000015ed5824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.m68k","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ecaa84-48c8-4c1c-c82d-0000ef1e0cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.ppc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d076c802-24b3-501c-6c87-00004db7185f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f720bc7f-1a77-14d8-ee57-0000d8c5ab48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i686","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d726ace7-bbed-1542-9511-00008864f544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86_64","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cb189d-09b8-dfbc-f207-00008f10edee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm6","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be48d3-9931-9e14-b7d3-00006fc09530","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.sh4","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b3e0141-a153-b907-afd8-00005d548e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b432b7-93e2-77ca-53e3-0000151b8efe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mips","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06aa14dd-1bdd-1769-6225-0000698a7e68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.spc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b04ebe21-3d32-4135-0cec-000026db8668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/main","pattern":"[url:value = 'http://176.65.139.211/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3198157f-33fd-2565-3c51-000062ba9790","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/boss","pattern":"[url:value = 'http://176.65.139.211/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cca0c2f-7a42-353e-72f9-0000106320ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cliaarch","pattern":"[url:value = 'http://176.65.139.211/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e289c-42b8-c8e5-9a1b-000081f4a7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/Error84","pattern":"[url:value = 'http://176.65.139.211/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7c2075-1a17-a64e-71a0-00006a7bf68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cli","pattern":"[url:value = 'http://176.65.139.211/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--295e9b4a-c684-e075-e105-0000971d62b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc24927-a880-f39a-4582-00009da54200","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm5","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f9b45c-cb1a-aed4-d332-0000d518b38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://alphalkenya.com/VSooNlFLuZpdMiw.exe","pattern":"[url:value = 'https://alphalkenya.com/VSooNlFLuZpdMiw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fcf339-7013-c1a3-d400-00005456974f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/bin.sh","pattern":"[url:value = 'http://125.44.47.23:54371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2d5273-80e4-f434-459b-00006f93f078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/bin.sh","pattern":"[url:value = 'http://115.56.161.81:37957/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42be4239-8f96-5cf7-0734-0000315a28ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8626ac-06fd-7c33-2e9d-0000e3114464","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183e0bab-0f82-3215-5f2c-000003ce3357","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5202367-a755-da10-4401-00003c29cf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22713f1-7ad3-287d-a0d5-00008495a872","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3027a46-98d4-6843-a3a7-0000bbbf445f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d48aff12-fd86-9511-8deb-0000759da528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2e424b-7864-1a30-9715-00009620079c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35aa1e37-2d07-ae62-36f3-00003710c3a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d740d0d-1d95-c6b1-ebe1-00001e681db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5e91a0-f9dd-7c9e-24e0-0000c987df7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50cab0c-5f28-4045-2aa1-0000b9299576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/dddd.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37eca06e-28ed-e987-33e6-0000b184b109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--615839db-f0df-e3af-5ca3-00001e9ecb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc1f67c-2227-ef59-6cde-000007186018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://18.175.166.211:60101/linux","pattern":"[url:value = 'http://18.175.166.211:60101/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--838d77f4-8f9c-9b7c-553a-0000b5cc8e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.172.100:60117/linux","pattern":"[url:value = 'http://47.236.172.100:60117/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e764f176-e903-9187-4905-0000e3722416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.85.120:60142/linux","pattern":"[url:value = 'http://8.219.85.120:60142/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98818c07-5175-1e36-6818-0000fcb03742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://49.235.101.101:60147/linux","pattern":"[url:value = 'http://49.235.101.101:60147/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1119fa-c082-d8e6-cd72-0000bd953a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.146.147:60134/linux","pattern":"[url:value = 'http://47.236.146.147:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aa89a96-2f2e-bf65-d6d7-00005e4bc8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.28.220:60115/linux","pattern":"[url:value = 'http://47.236.28.220:60115/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea16e865-c343-e881-8dfa-0000d819803a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.84.42:60116/linux","pattern":"[url:value = 'http://47.245.84.42:60116/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41019f3-bcb9-a700-e8a2-0000c543318f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.226.68.236:60128/linux","pattern":"[url:value = 'http://64.226.68.236:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7b97e-1a6a-4956-ec97-00009a1e4222","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.155.47:60149/linux","pattern":"[url:value = 'http://8.219.155.47:60149/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc21111-e61a-1e9d-8c8f-0000cf210cb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.179.91:60122/linux","pattern":"[url:value = 'http://8.222.179.91:60122/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee44f491-3b38-2768-d627-000009c636b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.62.229:60143/linux","pattern":"[url:value = 'http://8.219.62.229:60143/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb30aaaf-b8a1-1e26-56b3-000054633bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.122.72:60123/linux","pattern":"[url:value = 'http://47.236.122.72:60123/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6570ce2e-cc9b-7840-1cce-0000c3d9a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.70.102:60108/linux","pattern":"[url:value = 'http://47.236.70.102:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3406ba-0cd5-e9d9-0f55-00004b516df0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.169.170:60119/linux","pattern":"[url:value = 'http://8.219.169.170:60119/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abede522-9e72-f632-6a27-0000320d4ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.69.227:60133/linux","pattern":"[url:value = 'http://8.219.69.227:60133/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7963fb75-8b9c-8607-95e6-000085bfe7f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.210.218:60139/linux","pattern":"[url:value = 'http://8.219.210.218:60139/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89634012-a99f-3e57-32bd-0000cf164dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.241.116:60106/linux","pattern":"[url:value = 'http://8.219.241.116:60106/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35afb323-5e5a-7768-b628-000047fcfe20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.180.235:60136/linux","pattern":"[url:value = 'http://47.236.180.235:60136/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0283687-6d09-544e-d35f-0000aca571d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.167.249:60128/linux","pattern":"[url:value = 'http://47.237.167.249:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c070d2-d8e0-2274-ad25-0000ce201f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.127.21:60124/linux","pattern":"[url:value = 'http://47.237.127.21:60124/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb76b69d-fb0b-52bd-83a5-00000a44b3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.124.1:60108/linux","pattern":"[url:value = 'http://47.237.124.1:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796f68a8-faf2-fd00-31a5-00005334d469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.247.229:60132/linux","pattern":"[url:value = 'http://8.222.247.229:60132/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d3d13b-cad3-72cf-a230-00005bb138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.213.23.56:60134/linux","pattern":"[url:value = 'http://222.213.23.56:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a167b3c6-fa6e-3f7e-243b-00007d6aa67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://114.67.87.14:60125/linux","pattern":"[url:value = 'http://114.67.87.14:60125/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc173701-d2e8-f550-7df3-0000e6600ad6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.111.51:60121/linux","pattern":"[url:value = 'http://47.245.111.51:60121/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f634381-b499-93e5-02fe-00001b6e1852","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.13.23.149:6819/linux","pattern":"[url:value = 'http://106.13.23.149:6819/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1f8934-aefd-9889-3fa7-0000b05d2639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/i","pattern":"[url:value = 'http://115.56.161.81:37957/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae682a-8631-232c-1020-00005de6e9cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/i686","pattern":"[url:value = 'http://176.65.139.247/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42cbcf1-17e1-c2db-69f5-00003ad8d1fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/bin.sh","pattern":"[url:value = 'http://125.42.33.2:54415/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3876b477-480e-bace-bb95-00009c0784f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mipsel","pattern":"[url:value = 'http://176.65.139.247/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b1a0e0-0445-35f2-5172-00004ff5aa89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv7l","pattern":"[url:value = 'http://176.65.139.247/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23ae6e2-1e7d-f2b8-216c-00009038cc7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mips","pattern":"[url:value = 'http://176.65.139.247/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4687c262-c23a-31ab-a443-00003535f9e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv5l","pattern":"[url:value = 'http://176.65.139.247/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9cf323-9317-d888-a832-00000855d059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv4l","pattern":"[url:value = 'http://176.65.139.247/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba669a8-df24-6c5d-d47b-0000a8979f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/i","pattern":"[url:value = 'http://125.42.33.2:54415/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb565646-f3a1-10d0-8de1-0000ee88ba34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/bin.sh","pattern":"[url:value = 'http://123.5.124.6:35918/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537dec1c-7a3a-5cee-5965-00003d35ae88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.185.91.8:52353/i","pattern":"[url:value = 'http://123.185.91.8:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6def627b-f148-7a8f-bf5b-0000cbac34be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/i","pattern":"[url:value = 'http://123.5.124.6:35918/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71196feb-0953-1d1d-ec67-0000d7cfa536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/adb.sh","pattern":"[url:value = 'http://129.121.110.105/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0afd49-1f57-7b6a-be2e-0000cafa85f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/adb.sh","pattern":"[url:value = 'http://92.38.167.76/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddfcc0a-df40-85c0-c5a5-000088c29792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/fSegv","pattern":"[url:value = 'http://94.154.43.102/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79490fed-bf64-442e-1e52-0000ddd4e3df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/Sgsa","pattern":"[url:value = 'http://94.154.43.102/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0bc1ea8-9772-2dc9-5f46-0000358b89ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/adb.sh","pattern":"[url:value = 'http://94.154.43.102/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90437c8c-2571-223b-cd6c-00007006810a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/adb.sh","pattern":"[url:value = 'http://129.121.114.124/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0580ead3-7dd1-aa3b-e0bc-000032905684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Sgsa","pattern":"[url:value = 'http://129.121.110.105/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7849670f-f2b2-5ca3-6b0f-0000da9606bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/fSegv","pattern":"[url:value = 'http://129.121.114.124/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc21844-090d-4190-50da-000074945b5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fSegv","pattern":"[url:value = 'http://129.121.110.105/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5331b9-95cf-760a-a031-00000ac687d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/Sgsa","pattern":"[url:value = 'http://92.38.167.76/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81bf43d9-8bb4-b6c2-3dd2-0000f6a4f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/fSegv","pattern":"[url:value = 'http://92.38.167.76/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a88825-862e-19f2-d1ff-0000e1a7f86c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Sgsa","pattern":"[url:value = 'http://129.121.114.124/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7cdd8cd-c3a1-336c-71b0-0000c135b140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/jaws.sh","pattern":"[url:value = 'http://93.114.194.171/d/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b749ccd9-4c3b-dbdb-d19a-00001e612ad0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/toto.sh","pattern":"[url:value = 'http://93.114.194.171/d/toto.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5adc3f-d729-c5c7-bdce-00007d72d576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/sharp.sh","pattern":"[url:value = 'http://93.114.194.171/d/sharp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--983d8eae-e91b-02e1-55b2-0000daf8cc88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/coke.sh","pattern":"[url:value = 'http://93.114.194.171/d/coke.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8232286c-1aed-4771-399e-000020318842","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm7","pattern":"[url:value = 'http://93.114.194.171/d/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f70335-3693-c3c7-3cd9-0000de22564f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/aarch64","pattern":"[url:value = 'http://93.114.194.171/d/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b862bb-68a2-4ddd-44d6-0000af0c6690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mipsel","pattern":"[url:value = 'http://93.114.194.171/d/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b6dd47-8d28-a306-ecf9-000097377335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm","pattern":"[url:value = 'http://93.114.194.171/d/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3c4940-d8ad-3401-20c8-00008a3840c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm5","pattern":"[url:value = 'http://93.114.194.171/d/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d9b65d-3052-ea78-a3a3-0000dd829b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/nigger/arm5","pattern":"[url:value = 'http://205.237.110.232/nigger/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82980241-6a94-a63b-0177-000049ccdb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/i586","pattern":"[url:value = 'http://93.114.194.171/d/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bca0fb2-efc0-b97e-9d73-0000ce8558ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/aarch64","pattern":"[url:value = 'http://205.237.110.232/no_killer/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f4d128-b553-fbb2-9851-0000e0db903b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/proxy/mipsel","pattern":"[url:value = 'http://205.237.110.232/proxy/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d446f94b-cfeb-230d-dce5-0000d278990a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/mipsel","pattern":"[url:value = 'http://205.237.110.232/no_killer/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b84d023-2982-1ff0-8b3f-0000a5903fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/gpon","pattern":"[url:value = 'http://176.65.139.236/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f14caf9-3005-12c0-2df8-000065ace6d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/adb.sh","pattern":"[url:value = 'http://64.118.132.61/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4d1fd4-7266-6705-e954-0000bbc1eb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/test.sh","pattern":"[url:value = 'http://64.118.132.61/test.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f79013a-f9d1-9d57-71eb-0000ed48ddae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/yarn","pattern":"[url:value = 'http://36.255.97.21/yarn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62705e3e-8220-7d08-9889-0000aebe8cb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/o.sh","pattern":"[url:value = 'http://62.84.172.106/o.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--919a8313-5398-e3ca-d44d-0000ea62e9c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/goahead","pattern":"[url:value = 'http://36.255.97.21/goahead']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfb3bf0-bcb3-4c74-1783-0000576ff2be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zyxel","pattern":"[url:value = 'http://36.255.97.21/zyxel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cdc2a9f-663c-f79d-c1b6-0000e237e8f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/x","pattern":"[url:value = 'http://72.56.52.158/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12f69a36-ff9b-02fe-e52e-00000be0e927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/pulse","pattern":"[url:value = 'http://36.255.97.21/pulse']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faf3284-3699-4278-d38e-0000b9531c85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zte","pattern":"[url:value = 'http://36.255.97.21/zte']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3322a585-f151-6194-73b8-0000159895be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/huawei","pattern":"[url:value = 'http://36.255.97.21/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b29599-12da-2e98-3bbd-00002fed6a4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/realtek","pattern":"[url:value = 'http://36.255.97.21/realtek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7600a0c-7420-82c3-0673-00004a3135ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/hnap","pattern":"[url:value = 'http://36.255.97.21/hnap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00131cc-1e9f-2fcb-32ab-0000dd991d7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.29.95:46111/bin.sh","pattern":"[url:value = 'http://182.119.29.95:46111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baacf6-7b29-2bb4-6d98-00006c39e34f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/run.sh","pattern":"[url:value = 'http://91.92.40.13/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c760f8-ec99-3276-edce-00002f5c5b27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751f81cb-5b2f-a516-7b30-0000c61c9885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd359e7-b561-ad73-6eac-00002c78e6b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f96e00f7-54a2-ebf9-623c-0000eef76c5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.armv5l","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd41fd2-25c8-37e9-1874-0000369fbc2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm5","pattern":"[url:value = 'http://64.118.132.61/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d3395a-b091-ade2-034c-00008403e01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/sh4","pattern":"[url:value = 'http://64.118.132.61/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7681db0d-7780-36fc-dfa5-000004dd79e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc","pattern":"[url:value = 'http://64.118.132.61/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21de601d-ecfa-41aa-a349-0000e41ee1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/mips","pattern":"[url:value = 'http://93.114.194.171/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b24c38-ff9c-f4a6-f505-0000a7ad232c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mpsl","pattern":"[url:value = 'http://36.255.97.21/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5273bb06-3b24-fd97-411b-00003ec66ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/lg","pattern":"[url:value = 'http://36.255.97.21/lg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77538561-83e5-4fb9-5289-000009f5888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/dmpsl","pattern":"[url:value = 'http://93.114.194.171/dmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2179aafd-8515-bc2c-5bec-0000345b38f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips","pattern":"[url:value = 'http://62.84.172.106/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c16f161-0a47-7f10-3c09-000044108198","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm5","pattern":"[url:value = 'http://36.255.97.21/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dad9e56-c676-20e6-b41e-0000dbe26f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm7","pattern":"[url:value = 'http://62.84.172.106/sys64.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e751f83-05ef-dda1-0897-0000fa306b24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86_64","pattern":"[url:value = 'http://62.84.172.106/sys64.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4a04eb-9301-7de0-d349-0000a3a417ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d594fb-2d33-064b-12cc-0000ae73b0f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592273c0-3e9f-da19-f42f-0000b4abb866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b53c7e-5ab7-ca24-f039-000062e13e09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08afd0cd-9ed2-f262-4522-0000aa503bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5f746b-2cb3-c770-e6a5-000000739102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dd4e68-fd0f-0278-5602-0000242a13c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm6","pattern":"[url:value = 'http://64.118.132.61/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b6b42-216c-f74f-b0a6-0000c6b60669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc440","pattern":"[url:value = 'http://64.118.132.61/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a1701-5f62-9ba3-ffea-000010e24273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mips","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879f76e2-e522-16d6-c51b-000047c51142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mipsel","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98e5094-4512-1cf1-8045-0000bed7a608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/m68k","pattern":"[url:value = 'http://64.118.132.61/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcef2775-e8f2-d009-2398-00004c3ca265","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e131505-d60f-9e23-3d68-000041b62001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a26442-e077-a141-1798-0000be2170d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mips","pattern":"[url:value = 'http://64.118.132.61/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0070a28b-03bc-a2a8-485e-0000d5221e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mpsl","pattern":"[url:value = 'http://64.118.132.61/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0259887-8bcc-8088-9104-0000e2909c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/aws","pattern":"[url:value = 'http://36.255.97.21/aws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fd16d-3219-4f70-a525-0000bce5f409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm5","pattern":"[url:value = 'http://62.84.172.106/dlr.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f20cb4-20ff-ae67-89a7-0000c927cf27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.114.194.171/mips2","pattern":"[url:value = 'http://93.114.194.171/mips2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c974e084-d318-578f-9f37-00001b5cb0f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.ppc","pattern":"[url:value = 'http://62.84.172.106/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c64b5f-ddc2-2f12-c6f3-0000f21cdd8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68712d2c-0b40-49b3-b0d5-0000c209e107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.ppc","pattern":"[url:value = 'http://62.84.172.106/sys64.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0326cb1f-a804-f474-3438-0000190f2a98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/thinkphp","pattern":"[url:value = 'http://36.255.97.21/thinkphp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ab6c34-bc91-4deb-bf24-00005f5856bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mpsl","pattern":"[url:value = 'http://62.84.172.106/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65767527-31fe-1c70-a6eb-0000225a4c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/wow","pattern":"[url:value = 'http://205.237.110.232/wow']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f410a22-0918-a5a7-0f12-0000348b4e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.i686","pattern":"[url:value = 'http://62.84.172.106/sys64.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fbb6ab-f288-496a-886c-0000b9abd5b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86_64","pattern":"[url:value = 'http://36.255.97.21/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151fa0db-6df0-edd5-6c5f-000056a52e76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm6","pattern":"[url:value = 'http://36.255.97.21/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d23cf7b-5eea-4806-87cb-000042d778f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.sh4","pattern":"[url:value = 'http://62.84.172.106/sys64.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028d648f-2745-0078-6c58-00008c87482f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.ppc","pattern":"[url:value = 'http://36.255.97.21/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d584ea-ac3d-44e5-de79-0000f9556b35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mips","pattern":"[url:value = 'http://62.84.172.106/sys64.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abd5e38-52de-bf5f-9410-00004fe64ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2602d3-ec53-78a2-c550-00009b822904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sh4","pattern":"[url:value = 'http://62.84.172.106/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fcfb21-511c-2f58-90b9-00008ebaef9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/gpon443","pattern":"[url:value = 'http://36.255.97.21/gpon443']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d24e437-fbd0-f7b1-8e08-0000d343649f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.aarch64","pattern":"[url:value = 'http://62.84.172.106/sys64.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d559e2b-ed62-e313-7a58-000034adee2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.m68k","pattern":"[url:value = 'http://62.84.172.106/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a3ff7a-68f8-3388-db1f-000071eba7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm5","pattern":"[url:value = 'http://62.84.172.106/sys64.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e608340-34ff-e606-115b-0000d9f062c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips64","pattern":"[url:value = 'http://62.84.172.106/dlr.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7204e76-b3b2-0d97-7566-0000f19e13a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86_64","pattern":"[url:value = 'http://62.84.172.106/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c31ce2-3b5b-075b-da08-0000ba0a8f72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86","pattern":"[url:value = 'http://62.84.172.106/sys64.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4cbe27-8f90-ee14-294d-0000cc589bbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.m68k","pattern":"[url:value = 'http://36.255.97.21/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b252936c-ee3f-7694-6dca-00006ab29e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://72.56.52.158/ass","pattern":"[url:value = 'http://72.56.52.158/ass']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c074223-4c06-7cca-da85-00009256057f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mpsl","pattern":"[url:value = 'http://62.84.172.106/sys64.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1edb610a-4bc0-5ef3-431c-0000940691dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/i586","pattern":"[url:value = 'http://205.237.110.232/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820680d7-442b-010e-17e1-0000ae505be7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm6","pattern":"[url:value = 'http://62.84.172.106/dlr.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f9b03c-aaf7-a76e-7c93-0000f9a3bdef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.m68k","pattern":"[url:value = 'http://62.84.172.106/sys64.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77df86d8-098d-698b-9eb7-00000c59d1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.sh4","pattern":"[url:value = 'http://36.255.97.21/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--011e6646-2b63-1147-0e39-000049c9459f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm","pattern":"[url:value = 'http://62.84.172.106/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01babee-6711-c4da-321d-0000909c146a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm","pattern":"[url:value = 'http://62.84.172.106/sys64.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aaaaec0-7d83-c9d2-71f4-0000635e0825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm6","pattern":"[url:value = 'http://62.84.172.106/sys64.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae7e24d-3ed3-cf2a-6f5b-0000de12bd42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm","pattern":"[url:value = 'http://36.255.97.21/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ed2435-d7fc-8d37-f11b-0000f9851d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.i686","pattern":"[url:value = 'http://62.84.172.106/dlr.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33aae194-938d-da55-dd4a-00007f0addea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sparc","pattern":"[url:value = 'http://62.84.172.106/dlr.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6608af1-3af5-31b1-c92c-0000ccae4d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mips","pattern":"[url:value = 'http://36.255.97.21/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2518fa67-a16b-9a85-877e-000044d1094f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2aaed","pattern":"[url:value = 'http://5.182.210.174/d2aaed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826cfda4-9a61-3155-09ed-0000cf110213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9da0b2","pattern":"[url:value = 'http://5.182.210.174/9da0b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f2c4761-3d23-7d94-f520-0000308351c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0b3b49","pattern":"[url:value = 'http://5.182.210.174/0b3b49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ad4ad6-3d8e-e408-9feb-0000df837414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7f80fa","pattern":"[url:value = 'http://5.182.210.174/7f80fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a710c0bb-abb7-3c88-3b16-0000eb3093d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7addc","pattern":"[url:value = 'http://5.182.210.174/e7addc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--602719b8-1845-8fa7-ecc1-00000131f615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6337f1","pattern":"[url:value = 'http://5.182.210.174/6337f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--158d70d7-7552-8a5b-b2d4-0000c086e065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d7d14","pattern":"[url:value = 'http://5.182.210.174/2d7d14']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e2d9e6-a94c-868b-a334-000047e7148b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110181","pattern":"[url:value = 'http://5.182.210.174/110181']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c7d369-829d-6dab-60d1-00001c6574a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7e44c2","pattern":"[url:value = 'http://5.182.210.174/7e44c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc705f63-14bc-a35a-d6e9-0000d3c100bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b4efc0","pattern":"[url:value = 'http://5.182.210.174/b4efc0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2695dc-b2d0-6734-45a7-0000aede72d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76341d","pattern":"[url:value = 'http://5.182.210.174/76341d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29fba434-4dbb-c88d-df10-000037105ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83c238","pattern":"[url:value = 'http://5.182.210.174/83c238']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b7af0c-3668-5794-664f-000081f63a37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/meow.sh","pattern":"[url:value = 'http://176.65.139.247/meow.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a6ddf5-9c0d-1bb2-a9d7-00004c5a4972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/bin.sh","pattern":"[url:value = 'http://110.37.23.183:58054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f200c0a-a3b7-098c-4564-00006e3aafc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.120:42203/i","pattern":"[url:value = 'http://42.4.25.120:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c3346b-0174-d045-5600-000009b30170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcd08642-8d45-587d-e197-00006c62f1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9126cf-b824-3e33-2007-00002a53b45b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/o.xml","pattern":"[url:value = 'http://176.65.139.247/o.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57410444-af35-b128-2573-0000e652d4e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/peak.sh","pattern":"[url:value = 'http://176.65.139.247/peak.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36369c38-6b7f-8e75-959d-0000cc40a13f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/hypeman/agent.bin","pattern":"[url:value = 'https://sumiko.vu/hypeman/agent.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78fae22-3916-ee3e-e3c5-0000823cd831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ae66fb-3269-0a82-e3bd-00004f2e9b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta","pattern":"[url:value = 'http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--101db2df-77fd-5d00-faa7-0000c7569750","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://144.172.107.214/29/goodthingsforbestpersonforme.hta","pattern":"[url:value = 'http://144.172.107.214/29/goodthingsforbestpersonforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc5158e-37e9-0a62-249d-0000c366a3b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4710c3-0d75-3693-a4d8-0000c5e5ab4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta","pattern":"[url:value = 'https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25d34e0-336f-f445-9dce-0000f3644b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/bin.sh","pattern":"[url:value = 'http://42.233.106.94:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--403d16e4-81f4-c944-2fba-00001e6dc454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff5caac-17a0-3890-8902-0000d8d6d8a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta","pattern":"[url:value = 'http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa2541f-4323-062a-da24-00000503fb0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b8a963-c239-ffb0-294c-000004980c4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_041741.png","pattern":"[url:value = 'http://107.172.172.254/img/img_041741.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02d2ec1-492c-89aa-b930-00002ac3ec70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/bin.sh","pattern":"[url:value = 'http://222.141.47.192:60272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd1e4d7-72e7-67a5-140a-0000b776b25d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/i","pattern":"[url:value = 'http://119.189.160.169:47495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a23851e-5496-db8c-7a76-0000065dd622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/i","pattern":"[url:value = 'http://110.37.23.183:58054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf669434-b8d0-36c7-4b39-000066e8835e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/i","pattern":"[url:value = 'http://222.141.47.192:60272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c7a7aa-123f-550d-a13a-0000c4dfe082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/bin.sh","pattern":"[url:value = 'http://182.121.10.198:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb83254f-32f6-b726-4f57-000013f28d95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/ttues/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/ttues/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcea6f1c-6cf0-6c6e-0e58-000043f06308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd6152d-6d69-591f-812b-00009ce601b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/bin.sh","pattern":"[url:value = 'http://210.208.110.20:51485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a978c6-7fd0-0d7e-578d-000029b84789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/i","pattern":"[url:value = 'http://42.233.106.94:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--583f19d5-554e-d67a-ed26-000052523608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/i","pattern":"[url:value = 'http://182.121.10.198:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ecc24d-e248-ec18-dfd2-0000dc44409a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/i","pattern":"[url:value = 'http://210.208.110.20:51485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d48cd89-3a75-3446-ed84-00001cc1053d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/bin.sh","pattern":"[url:value = 'http://61.54.232.80:41350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc5dd0f-5d5d-26da-d5a4-000020b28fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mukabar.co.mz/css/images/stego_oo8nser2q2.png","pattern":"[url:value = 'https://mukabar.co.mz/css/images/stego_oo8nser2q2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaa7152-a1cd-08c2-5af5-00009b69bd8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.74/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.74/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0011c8-2ba1-a53d-5c09-00003813a1ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.233.127:51731/bin.sh","pattern":"[url:value = 'http://115.57.233.127:51731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bca288a-a323-0b65-5fde-00003e385ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/i","pattern":"[url:value = 'http://61.54.232.80:41350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbc962b-7e91-4554-b548-000025a23eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.108.151.84:39084/i","pattern":"[url:value = 'http://101.108.151.84:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78e9e3a-5324-b934-ca2c-000038482c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/loli","pattern":"[url:value = 'http://176.65.139.195/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2d5d2d-a735-ef10-f13f-00008e29ef3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto","pattern":"[url:value = 'http://176.65.139.195/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64c9e9f-f796-0efc-935f-00009291108a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto1","pattern":"[url:value = 'http://176.65.139.195/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88a5be-ec51-f057-6379-00000ba5d5d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/nvidia.sh","pattern":"[url:value = 'http://176.65.139.195/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e67fe-42a3-baf4-bf28-00007627587a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check1.sh","pattern":"[url:value = 'http://176.65.139.195/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17691eed-fd4e-8d2e-1273-0000b563e069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/boss","pattern":"[url:value = 'http://176.65.139.195/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad660299-64db-16d3-8809-000090536093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.195/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e80d09-4a66-a7b3-1dc5-0000e0d86a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check.sh","pattern":"[url:value = 'http://176.65.139.195/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c9fe0-6ab4-72de-8015-0000f2fe3e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cliaarch","pattern":"[url:value = 'http://176.65.139.195/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96bfb5b3-4e71-8ac2-0a4d-0000f102f191","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/main","pattern":"[url:value = 'http://176.65.139.195/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede7927d-659f-773f-517d-0000d5462103","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/oldboss","pattern":"[url:value = 'http://176.65.139.195/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df75f65-f125-940d-4dcb-0000a4906a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/Error84","pattern":"[url:value = 'http://176.65.139.195/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06471e45-d14d-6877-a3a2-0000bedee16f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cli","pattern":"[url:value = 'http://176.65.139.195/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbba051-9764-ff58-a189-00006bbcd709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traff","pattern":"[url:value = 'http://176.65.139.195/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3ffd3d-44ee-c441-40fb-0000cfb1815e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.195/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c18e27bc-f75a-c9d4-892f-0000e8f75e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/log","pattern":"[url:value = 'http://176.65.139.195/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4461133a-363b-b677-0bc8-000086d035f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traffaarch","pattern":"[url:value = 'http://176.65.139.195/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799cca24-ca41-e3a8-a8a8-0000039e4b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/wd1337","pattern":"[url:value = 'http://176.65.139.195/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b04d9f2-2e06-0193-57ff-000015a158d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/syst3md","pattern":"[url:value = 'http://176.65.139.195/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10dee19a-1d8b-0cc1-fbb9-000022fc45e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/proot","pattern":"[url:value = 'http://176.65.139.195/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef9e2f9-537a-b1d9-bf34-0000e64ad629","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/proot","pattern":"[url:value = 'http://176.65.139.211/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cddae0b-9def-e825-ec42-000030c5951d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/syst3md","pattern":"[url:value = 'http://176.65.139.211/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3ee584-a0a7-9312-ca3e-0000f022ecca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/oldboss","pattern":"[url:value = 'http://176.65.139.211/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b5198c-901c-3151-afac-00003c5249b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/log","pattern":"[url:value = 'http://176.65.139.211/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad39ddc5-4e49-1e0e-d577-0000088122f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/wd1337","pattern":"[url:value = 'http://176.65.139.211/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d677a4e-4e90-1aeb-80d7-00008874807e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07dfc050-0af7-3265-488a-0000455c7312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f403c114-51c0-9c80-d68c-0000a4b1f943","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3d3508-64ad-97ba-a7cb-0000003c9a5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--723464b2-fe86-505f-6c27-0000128935b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cd07c7-a7d7-55f7-d046-0000ca02edb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05335424-1b81-2a59-b26e-0000aa3552d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6947d6-667d-9a89-39a2-0000f6240c2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd16ad1-c552-3f41-c66b-000016fb7b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b4e98-f4cc-8d10-ef29-0000888256a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81512343-69a5-089e-2c27-0000246f60b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b1f0da-363b-19c7-f041-0000dcb29736","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64998851-73cf-801f-c71f-0000e38138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b143e-7d8f-8c5b-3317-00000894d219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660dfa22-4734-5f8d-f8c3-00005f5da2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/bin/support.client.exe","pattern":"[url:value = 'https://2.58.56.151/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--337bd4b2-c786-9ead-c925-0000102fc74c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05856de8-df0e-8ade-1041-00001e06a6f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/bin/support.client.exe","pattern":"[url:value = 'http://124.198.131.176/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e336d9-2670-1f1b-e5e6-0000c6316976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f42a3f-743d-9117-fa69-00000efa1d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.172.96.218:7777/coldcard_final.py","pattern":"[url:value = 'http://144.172.96.218:7777/coldcard_final.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df6b573-58eb-7264-d012-00006fad9e1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.87:35915/bin.sh","pattern":"[url:value = 'http://219.155.229.87:35915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96880b4d-4030-7c13-3b5c-00008ca38972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.80.18:35873/i","pattern":"[url:value = 'http://115.57.80.18:35873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f90936-2fb2-9300-e328-0000c1332d7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.238.55:57598/bin.sh","pattern":"[url:value = 'http://119.116.238.55:57598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7c3901-5c9b-9660-642e-0000a2839fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://14.0.131.161:51651/i","pattern":"[url:value = 'http://14.0.131.161:51651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2936138b-10ea-ee8c-6136-0000b74365ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://178.16.54.38/us01.zoom-connect-invites.us.zip","pattern":"[url:value = 'https://178.16.54.38/us01.zoom-connect-invites.us.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d61b99e-147e-1c0b-f5a1-00000c499456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.236.173:58333/i","pattern":"[url:value = 'http://219.155.236.173:58333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c299eb98-1365-3d0b-ec5b-0000332fade3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.241.208.90/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://185.241.208.90/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f4a534-e034-8207-9d64-0000beb476ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/i","pattern":"[url:value = 'http://125.41.228.207:54336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a38cc4c-8e78-0bb5-ec76-0000c2bb11dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/bin.sh","pattern":"[url:value = 'http://175.173.53.215:46519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4690a98-2535-8117-056a-0000c9f79d64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/bin.sh","pattern":"[url:value = 'http://123.8.45.230:53516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3227d6b2-2698-7ee9-ec65-000040c4b810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.53:44835/i","pattern":"[url:value = 'http://120.84.214.53:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648af908-fa1a-63d2-941f-0000327624b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/bin.sh","pattern":"[url:value = 'http://78.25.123.5:48319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a10d5e-eeb1-313a-27cc-0000862baba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/i","pattern":"[url:value = 'http://78.25.123.5:48319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6300e8fb-3ac2-508e-6e4f-0000db40a018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/i","pattern":"[url:value = 'http://123.8.45.230:53516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277938e0-28d6-4195-132e-000063d2e04a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/i","pattern":"[url:value = 'http://175.173.53.215:46519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1853b-04a1-919e-5aee-00004db1f11c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/bin.sh","pattern":"[url:value = 'http://42.227.207.180:58373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--942b8d2a-8cc8-21e6-3ef0-0000e33d994a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/i","pattern":"[url:value = 'http://42.227.207.180:58373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5800256-594d-abb3-e774-000043c9f6bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8023e41-a647-a6d6-9b69-00002ae5d8e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e275b18f-e5c4-5b2a-5e3c-0000c3ae03bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/i","pattern":"[url:value = 'http://182.117.165.9:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f441c7de-9271-3f5f-e0ac-0000f6016def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/bin.sh","pattern":"[url:value = 'http://190.109.228.150:37896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebcd385-5fa5-bf86-5d2a-00007b4af5b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe","pattern":"[url:value = 'https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f933c8-a9e5-fdf3-7d3a-00005bc0ad87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efbcb0b2-b1b5-9b74-f60f-000014be3e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/i","pattern":"[url:value = 'http://190.109.228.150:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135cbdfc-8ebd-7bc6-2b1e-00007b1e0223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/bin.sh","pattern":"[url:value = 'http://222.142.245.198:49568/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cdbd7-c9e1-e3a2-ec3c-00000a7d260c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.91.206.69:41124/bin.sh","pattern":"[url:value = 'http://59.91.206.69:41124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--084e0fe3-e65d-2b00-4fe7-0000492e5b07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/i","pattern":"[url:value = 'http://222.142.245.198:49568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4bf2ae-1025-a280-a2fe-0000e0142e88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/bin.sh","pattern":"[url:value = 'http://175.148.158.154:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a326f81c-2c27-49b3-2a64-0000ef22f151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/bin.sh","pattern":"[url:value = 'http://125.45.148.93:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1277b336-c9bd-31d5-5e92-0000d519c57a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.251.225.122:36907/i","pattern":"[url:value = 'http://112.251.225.122:36907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be3cca41-8eea-643f-4c63-00009b54e1a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/bin.sh","pattern":"[url:value = 'http://163.142.93.187:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941c4229-d0aa-7e17-2513-000015a4499d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/i","pattern":"[url:value = 'http://175.148.158.154:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469b1137-8c15-cea3-f58e-0000e156df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.7.234:37031/i","pattern":"[url:value = 'http://175.175.7.234:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfeface-429e-94d5-1a72-0000db112803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/i","pattern":"[url:value = 'http://163.142.93.187:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faeca1d-7fd8-ef17-a9f5-0000e0f3c4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/bin.sh","pattern":"[url:value = 'http://182.121.138.136:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fdcdc0d-5704-bb8b-f41d-00005e46c21e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/bin.sh","pattern":"[url:value = 'http://42.224.175.231:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1155b79c-576c-971a-3295-0000b0fa992f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/bin.sh","pattern":"[url:value = 'http://221.15.141.166:50250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61055ea5-e6e7-8b08-0b88-00007f975e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/i","pattern":"[url:value = 'http://182.121.138.136:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281aab1b-8496-104e-6cb2-00005494954f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/bin.sh","pattern":"[url:value = 'http://123.4.178.145:35087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b29c4ef-fe52-96b1-edb8-0000bbec581e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/i","pattern":"[url:value = 'http://221.15.141.166:50250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93563cbf-bcff-c6f1-4498-0000cb8f712e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/bin.sh","pattern":"[url:value = 'http://115.50.150.5:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--115368bc-b544-45c6-2d07-00006774a32a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.54.164:45403/i","pattern":"[url:value = 'http://175.146.54.164:45403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382032c2-cd81-ddf1-0101-0000b0437301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/bin.sh","pattern":"[url:value = 'http://42.180.33.198:56646/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df1222-3c2b-2dd5-f862-0000a12768d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/bin.sh","pattern":"[url:value = 'http://27.219.18.191:56945/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c92b9d-a3b8-9ab9-750d-00009575e942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.241.62:53088/i","pattern":"[url:value = 'http://115.55.241.62:53088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03d2359-5c7c-b212-20a7-000071da6b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/i","pattern":"[url:value = 'http://27.219.18.191:56945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f401be0-f6c9-0b73-a0d6-0000827e1f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/bin.sh","pattern":"[url:value = 'http://1.62.79.200:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34cf5f0-fce5-fd1e-8ea8-000057132ece","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/bin.sh","pattern":"[url:value = 'http://115.55.195.102:56873/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506ddb1a-cd44-7a3e-86c7-0000b4086269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/nels/cli.exe","pattern":"[url:value = 'http://62.60.226.140/files/nels/cli.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--435be923-29cc-f3f6-f841-0000bd787d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.5.187:37816/i","pattern":"[url:value = 'http://124.131.5.187:37816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec425c4-59cc-d5e6-ec12-0000162aad02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/i","pattern":"[url:value = 'http://110.187.193.166:37676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c168cb0-4f25-0347-1d29-000052cad9e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/i","pattern":"[url:value = 'http://222.137.175.14:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b9e43b-71e3-7390-dd00-000054e7727a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/bin.sh","pattern":"[url:value = 'http://222.137.175.14:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a49ed43-0063-3dc5-04aa-0000627a02c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/i","pattern":"[url:value = 'http://115.51.88.28:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ebbec1-6a32-6da4-1eef-00002985019d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/i","pattern":"[url:value = 'http://219.155.125.9:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ec86b-07f6-91c6-070b-0000a4608239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.246.175:50104/bin.sh","pattern":"[url:value = 'http://110.39.246.175:50104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d89b479-0e9a-af66-3e28-0000bb9b4604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/bin.sh","pattern":"[url:value = 'http://115.51.88.28:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3453c-7e52-689a-bd29-00004bd36135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/i","pattern":"[url:value = 'http://42.180.33.198:56646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1d61fb-b661-a17e-9706-00005207efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/i","pattern":"[url:value = 'http://115.55.195.102:56873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d619f8fa-bf4f-a480-feb5-0000f42b700b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/i","pattern":"[url:value = 'http://182.114.255.23:39795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27166075-38d9-b8d7-b09a-0000376531c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.118.60:44378/i","pattern":"[url:value = 'http://182.116.118.60:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1355b6b5-5973-ada0-3894-00009e7dd503","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/bin.sh","pattern":"[url:value = 'http://182.114.255.23:39795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f056d70-f67b-ec98-57cc-000000beccc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.59.112:44682/i","pattern":"[url:value = 'http://42.53.59.112:44682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d446d5e-e781-54cb-2ecb-000033b6d65a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/i","pattern":"[url:value = 'http://1.62.79.200:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6417e625-6ab3-3303-7b61-00004107106c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/bin.sh","pattern":"[url:value = 'http://123.8.90.13:33466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d40cfc-bc44-3dcf-21f1-000065a3964a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.188.38:34593/i","pattern":"[url:value = 'http://27.206.188.38:34593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecc21aa-7810-8c93-c692-00003ed4061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/i","pattern":"[url:value = 'http://110.36.86.83:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82232ba-3c1c-0521-af54-000004af2b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/bin.sh","pattern":"[url:value = 'http://182.126.248.115:38763/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f5c6c3-18a8-246f-4273-000037e81bf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/bin.sh","pattern":"[url:value = 'http://45.233.94.135:53401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a7679-7cff-89c7-8526-00005d8d70d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/i","pattern":"[url:value = 'http://45.233.94.135:53401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4916d463-b2d8-1eab-c8a4-0000af6785d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/i","pattern":"[url:value = 'http://182.126.248.115:38763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83dc6019-1f51-62be-5949-00000d19288a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/bin.sh","pattern":"[url:value = 'http://42.59.232.35:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079e64e-4b37-e542-70a7-0000af8f78d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/bin.sh","pattern":"[url:value = 'http://110.37.53.25:34437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d25553-28ee-e98e-2fa2-0000359dcf4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/bin.sh","pattern":"[url:value = 'http://182.124.253.104:42413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79226ad9-14e3-0ec0-32b4-00003c5c89a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/i","pattern":"[url:value = 'http://42.59.232.35:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e6601c-b905-4950-3402-0000cdde3306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/i","pattern":"[url:value = 'http://123.129.2.24:55703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b322f-190a-bbf8-3c1c-0000a072d97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.162:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deeecbb-b3ea-8aff-4b3b-00008804274d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/i","pattern":"[url:value = 'http://110.37.53.25:34437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e475dc5e-ce9a-e7bf-dd58-00009fb64950","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.242.210:39720/bin.sh","pattern":"[url:value = 'http://110.39.242.210:39720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d57d7-1635-b363-dbdc-0000812790d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/bin.sh","pattern":"[url:value = 'http://218.74.100.187:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f659ed-2eda-da0d-21cb-00006aebb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.102.26:41199/i","pattern":"[url:value = 'http://105.184.102.26:41199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0a2afd-e759-1a03-42c7-0000c6d480a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/bin.sh","pattern":"[url:value = 'http://182.121.185.249:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9861cda0-fe21-d09c-5da4-000069efe09b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/i","pattern":"[url:value = 'http://182.117.10.162:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec10031-3fce-0207-ec71-00003dbc3831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/i","pattern":"[url:value = 'http://39.73.44.67:44345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa0784c-4fa2-eb11-3cf0-0000bcc66196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/i","pattern":"[url:value = 'http://182.121.185.249:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0054c881-2651-57d2-0873-00007ba4fcb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/i","pattern":"[url:value = 'http://219.156.184.4:33396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ecde69-14fc-b50c-f744-00000577f3a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/i","pattern":"[url:value = 'http://218.74.100.187:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032bc95c-19b0-1625-1180-00002754073e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/bin.sh","pattern":"[url:value = 'http://219.157.212.157:52831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ce0444-a2b7-3ef8-3d00-00009b554a00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://tblcxmo.duckdns.org/sysorbit.apk","pattern":"[url:value = 'http://tblcxmo.duckdns.org/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445cc04a-7196-fbc2-b0e8-0000205c876d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/i","pattern":"[url:value = 'http://219.157.212.157:52831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a34babb1-295b-5073-59f8-00009c172c10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/bin.sh","pattern":"[url:value = 'http://196.190.224.62:36692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6714d9ab-2d40-cd90-f1d5-00006b7b5d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f56d5c6-36e8-831b-08e9-00001f136ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fc95cb-25ff-b13f-ff2c-0000d1b1fc55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/lm","pattern":"[url:value = 'http://46.151.182.200/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e3613a-75ae-1fc8-65cb-0000986fcc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/script.sh","pattern":"[url:value = 'http://46.151.182.200/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af7e5f69-850d-8bae-67b0-000039eea80e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f050ed7-631f-585b-c8cb-00009259bf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d707a3e7-1d1e-e22b-e047-00004395f9d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c57aed5d-6179-8a9a-045e-0000cb12ed0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17ee36a0-90cf-2a21-c974-0000e3a046d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad20fd52-da85-b94a-7aa6-0000013200e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac92e36-84ff-35bf-c5e8-00003d2fafae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm","pattern":"[url:value = 'http://77.90.185.66/miraint.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c714221-9259-f136-0893-000028b40528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/xvr.sh","pattern":"[url:value = 'http://77.90.185.66/xvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a3a8f4-da17-d352-269e-00006fba5ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.ppc","pattern":"[url:value = 'http://77.90.185.66/miraint.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71670c89-5e48-5455-776d-000065f1de27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mips","pattern":"[url:value = 'http://77.90.185.66/miraint.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c2c05a-ff23-1390-dc06-00002bcd9a38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd8079a-d295-64d9-d80f-0000c3bbb402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdf0525-682d-8fcc-6afc-0000a1ebfafa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/hybrid.sh","pattern":"[url:value = 'http://77.90.185.66/hybrid.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311a1d09-2841-89fa-4d0a-0000f9a9eb76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/faith.sh","pattern":"[url:value = 'http://77.90.185.66/faith.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a8e234-7823-04f7-e2df-00006351b2df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62bcd4f7-03d8-f934-0d7c-0000637edf25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a888f9-9e0c-861f-d74c-00006534347d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25fbe6e2-c18d-c989-0717-00007c5b3ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655267f2-0251-ca2d-403e-0000edef2fcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f4334c-cd6d-cc57-d00d-0000c34d62d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1606e5e-f3b3-289a-04ee-000024986194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/boa.sh","pattern":"[url:value = 'http://77.90.185.66/boa.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0494e45-8df5-52b3-733a-0000e3dd91ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.sh4","pattern":"[url:value = 'http://77.90.185.66/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--784289c8-1d4d-933a-19d5-000019598190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12463bfc-d7ed-de13-f347-0000eba5c495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7a24fd-106c-d29f-5714-00000852dc95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da4d4fa-b2a0-270e-5d5f-000078cad45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60b29897-3da1-ab8f-b9fc-000090dd3909","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/zy.sh","pattern":"[url:value = 'http://77.90.185.66/zy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7056102b-3bdb-dab0-ea15-000008a40a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d106b9f-2103-f4a3-4911-000099871866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c9d65-34bd-5ef1-b56d-000051eac48d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec85d3c-5ea1-9bef-5a7c-000043ad30bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5188e02c-7197-d1d3-9a35-0000783c0285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd43154-6e80-ba22-794e-0000d820d282","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a72db0-f9c9-365e-e217-000059b0d712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df84b062-391c-b548-7598-0000b135b3be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75d124b-7040-4dfb-923a-0000e5977ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.spc","pattern":"[url:value = 'http://77.90.185.66/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96a7e5b-72ca-1f85-48e8-000088445828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a06f79d-0bb5-186e-3d3f-0000b323bcc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e516ad-4eac-13ba-fca6-0000e92e286d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.spc","pattern":"[url:value = 'http://77.90.185.66/miraint.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff11993a-6937-c38a-8ac7-000017b934b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.x86","pattern":"[url:value = 'http://77.90.185.66/miraint.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060c5f6d-fdac-17af-0101-000080ec106b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b5ca40-a2ec-1b38-a469-00000ef2b06d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mpsl","pattern":"[url:value = 'http://77.90.185.66/miraint.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7455c716-e050-9918-5f1e-000073677eea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.m68k","pattern":"[url:value = 'http://77.90.185.66/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51bac12-3ebe-1d0f-eaa3-00006303081c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.ppc","pattern":"[url:value = 'http://77.90.185.66/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd710331-397f-503a-79a3-0000ddf0d89d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arc","pattern":"[url:value = 'http://77.90.185.66/miraint.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ae7c0a-cb1d-01b3-3be9-00004b0578fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0ac153-d302-b644-5932-0000a8b8da48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa51f68-50eb-642c-567f-0000d9548600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/link","pattern":"[url:value = 'http://46.151.182.200/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa01d26-4452-b672-61d8-0000e10cb077","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdcb857-1746-151d-ed02-00003efcc78b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee3d2fa-744e-697e-f24d-0000c628a789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/lilin.sh","pattern":"[url:value = 'http://77.90.185.66/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e05243-2721-42b8-167c-0000ae2daba0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/asus.sh","pattern":"[url:value = 'http://77.90.185.66/asus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fac3acd-8865-4a48-68d2-000097c87178","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52382f51-a905-e89d-44d5-0000a3168188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dea8494-2fe7-9eaf-d599-0000115c03d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8761233-783d-0291-c747-000013c9ba15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c6726e-f0ab-fb84-661e-0000d931df3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b866c3-69eb-85a6-1b5c-000091829a20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9dcce46-0e77-c4a8-5338-00005a7dd02a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5c076e-494a-ef4e-cf60-00009ba328a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4c8952-8d2b-2638-2ac5-00000e6591b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125b1521-c48f-4044-1505-000006f50703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/a.out","pattern":"[url:value = 'http://77.90.185.66/a.out']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7eed21-8381-6b88-78f3-00009194b8bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4b385f-b871-8e3a-eed6-0000650708fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.m68k","pattern":"[url:value = 'http://77.90.185.66/miraint.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a99ddc-97ba-41b3-b5f8-00001b006669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.x86","pattern":"[url:value = 'http://77.90.185.66/mirai.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f14aa3-8fe8-66ad-26ac-0000ef64c335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.sh4","pattern":"[url:value = 'http://77.90.185.66/miraint.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b117719-3cf8-0780-a824-0000ed4f12d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm5","pattern":"[url:value = 'http://77.90.185.66/miraint.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeeaa35-0545-0e49-62c3-0000c58cf923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51f1635-3649-b23d-ba39-00004746da52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm7","pattern":"[url:value = 'http://77.90.185.66/miraint.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa6e865-46a7-d36b-20a2-000013783316","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e79d1c-8ad8-1acc-0e8a-00001bcb9c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/avtech.sh","pattern":"[url:value = 'http://77.90.185.66/avtech.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5058b55a-6d8d-ed70-9707-0000695f6da3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62ac34b-2e37-cc36-8e5c-0000b3d56a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37dc253f-d770-c7ff-ab07-0000bcd7a92c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7305699e-3823-5194-32de-0000c7aef446","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea5ac1c-d9e9-0941-c3c7-00004544bb26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/bin.sh","pattern":"[url:value = 'http://118.232.137.101:40783/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31826d41-b6fe-f237-ce69-000056cb558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/i","pattern":"[url:value = 'http://118.232.137.101:40783/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c92c4c-3da5-0ca4-41b8-0000567f2020","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cd7d7c-69ae-2b45-4cae-0000d6d96d8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c4faf2-7bb6-11f1-e181-0000306cedbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d4a054-bdae-734b-5ad8-0000b07a6901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ae145e7-fd31-7f0d-16a1-000002d8ea4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda2dbc4-70e1-8d43-1862-000038c4a5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5206669d-6bf2-d043-284a-0000db79074b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38306665-f6ee-1803-f543-0000af14b0d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33acbae8-6ae8-2bf2-c8cb-000092cd6d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6890116a-8c13-8df4-f2e4-000012e0bb64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4515ca70-cd54-1a98-1e08-0000fc4ff694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e734ac33-b7fc-8c8c-6941-0000f15d19d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cc50f5-228c-0154-80e5-00006f102772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7408041-023f-7842-fd8f-0000c8717b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a570cfc6-b400-8695-6010-00007d331544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e4da5a-dc22-898d-d00d-000049ede5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c8e2c1-dfec-618f-6520-00009dec6277","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a266485-9424-5f0d-a5b1-0000c014b711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f43460-1447-0f47-5a3d-0000bd5b4be9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e0686e-25d6-2bdf-6788-0000bb11a0b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacc2360-0a71-af7d-f12d-000090da77be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d71e24f-558e-4436-e72b-0000c4fa5fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e66afa-107b-a7a0-41e5-00009a5e779a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df519e9-4a64-6849-c7a8-000004920117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eca5e2c-1cc4-090a-b525-00009aa8a140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73389afd-fd19-19f8-c35b-0000eac67f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff08654-ad0e-fa5f-3266-00004fa70eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf89482-d0e5-967e-9f5f-0000b08cbfdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4775507b-977c-a9f9-1300-000036061abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a6d637-8aa7-98f4-191e-00003d85d21f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--869e7046-2dec-cd5a-ced5-0000b8e973ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71055cd-e24d-1986-ba36-0000b77af96f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8472e432-7328-92c6-d0e5-00005780522c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12724aef-0869-0b38-502f-0000e25565be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44ab8a7e-e209-5289-25ca-00002a710a11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f92c9b-5451-2d44-0b35-0000f8603328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19940d0-e2a3-e430-9961-00000055148a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ea5c34-6040-5a10-4c87-000081c5111a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d8969a-7caa-fa85-6ea1-0000abe10f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f6305c-4709-5f80-1439-00001a48f327","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac9cf48-e704-e4d3-5181-000024252889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f1abdd-6c38-c395-bf23-0000f66e4412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f117844-890c-3565-c639-00000eb3b391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60a5053-c6ef-276e-f6f5-0000c0e261cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f14ae2b-d88b-4b8f-d09b-0000ea30a98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf747df2-a93e-3770-e80b-00008fcf5041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a3498a-dcb7-3654-38b0-000076b0dde4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd14e7f9-3ced-120f-667c-00004586bc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5f7d3-79bb-3095-5a18-0000f024af4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31402e9c-a181-e255-b8aa-00007da44cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a7fbbe-ebb9-810e-69c7-0000844c98e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa26403-c1d7-0cee-c89a-0000cf79971a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d088babb-4d04-be43-2c1f-0000c03419af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/script.sh","pattern":"[url:value = 'http://46.151.182.200:8080/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c245b4ef-3230-e534-5e42-0000d0d70c52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc4b634-5a4a-102c-ac17-0000f9820748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d4580e-4234-ce2e-f1b6-00000d34a915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa44f95b-e3ea-7b3d-6d34-000020505b28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad0ea3a-30ec-07f3-5f3e-0000ffc8ec10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48cf95-4da4-d00f-e24b-00003bcb3da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5428479-1f55-ae6f-bdea-0000686b6b37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570d0036-29be-91c5-dfca-0000aa21a066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf86095-17a9-20c0-0d92-0000d9352ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a119a85-df3b-d034-c9a9-0000f296defd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9915aa-3cfd-036d-3fca-00009eff5096","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aeb0e8-2441-159c-9a7d-0000862ce4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/link","pattern":"[url:value = 'http://46.151.182.200:8080/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--109da79e-220e-7dca-cb70-00006c031593","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e35e54-1f0f-a854-45bc-000082f800ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8231989d-42f9-4c71-e470-0000e9fb6ea7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652465ad-b935-d3fd-8ef0-0000015ff0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9a095c-3434-45a5-5077-000050c853e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d404d92-f741-d32c-70f2-000039ea59e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f98fa1-15e8-f486-7b19-000054b6bcbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fcd2a1-14be-f800-96c5-00002bc96bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d37e5bf-7fb5-f9ae-1fbf-0000a1c05eb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62356949-e761-9dee-69e9-000069b1e74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c00400-beeb-132b-6d77-00000b7e424d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f963f92-8c49-bc1f-beb1-00004b533562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78263b33-ec8d-4887-25f4-00003ce474da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/lm","pattern":"[url:value = 'http://46.151.182.200:8080/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48965463-328a-7201-d78b-0000795c9ebe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb589533-f0fc-24db-dfed-0000bbddb915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043eb405-5355-302d-f1f3-0000b375f156","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39b44e8-5a28-e2e9-d711-0000a04f0498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fd3d95-bca3-a5af-b3de-0000a64af9b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c520603a-af84-ac59-7820-000083196e42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ba0b44-bf69-e625-a359-00004ba5e3b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbee252e-bd68-b176-c5ab-000069e43117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554bbe6f-cb5e-9352-eed0-00002cb5d2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcf6a82-9e4b-4163-4399-0000820ed637","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4bd5c3-3480-07b5-66d3-00007adec4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a9209b-099e-c8de-34b3-00003fbe2d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1dee0c-cd6f-c205-ffcd-00005e970e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4f0c5b-74b6-2149-4199-0000de4997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8dc415d-52f6-0490-2bb4-0000f615181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32df4f5-7f42-0e6f-1061-000072768c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea30d529-eb7b-a844-09bd-0000197c39dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2292e657-141e-9e69-6a75-00008ba0dbbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7258a99-72c6-cef5-e2f4-00008cdc62a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6744ffa6-8fac-97a6-dced-0000cb161ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f20d799-74cb-89f4-00e7-0000f3a3b5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09b202-6d37-3ddd-1fd9-000058dde563","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2138ad-259e-e6d1-91c9-00007e2027a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163dae53-af93-66f5-a541-0000f2600827","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ef689a-7667-b5e4-aff9-00009963666d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7264fb43-ce87-22a5-7196-00003b3deb72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20195c38-17db-f2df-2102-0000ac6b4b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d5516c-240b-c911-cd01-0000e0a23dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pppc","pattern":"[url:value = 'http://31.77.227.121/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32555d0-4b37-e195-9047-0000f5370d0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pm68k","pattern":"[url:value = 'http://31.77.227.121/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d87b33b-bdf5-0a70-5dde-0000607ca43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/psh4","pattern":"[url:value = 'http://31.77.227.121/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bfd7ae-f7c1-6dd4-b431-0000b237c8a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm","pattern":"[url:value = 'http://31.77.227.121/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f096106-b296-7396-8555-0000f5c1dbd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmips","pattern":"[url:value = 'http://31.77.227.121/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57f1a96-5c9e-8614-bf65-00007d7f172f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm5","pattern":"[url:value = 'http://31.77.227.121/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--456760a2-efde-b3a5-19d3-000098a153b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/px86","pattern":"[url:value = 'http://31.77.227.121/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c764b2c-d5fb-b999-96bb-00006fcab8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm6","pattern":"[url:value = 'http://31.77.227.121/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a93ef35-741e-7d4c-baa8-000066364f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pspc","pattern":"[url:value = 'http://31.77.227.121/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b717bba-d57e-42f4-371c-0000d776dfa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm7","pattern":"[url:value = 'http://31.77.227.121/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adba7cf-d8b2-1c20-ddd0-00009ec2b59b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.121/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee4b651-70f0-f042-e4ce-00008cf02ef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/i","pattern":"[url:value = 'http://36.69.84.54:40914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01700e3-2692-f336-66a8-0000dc01ae30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/bin.sh","pattern":"[url:value = 'http://36.69.84.54:40914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae7ecfa-6bff-4a94-83b3-000080807829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip","pattern":"[url:value = 'https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0430e0ca-19c8-9202-437b-000010e9957c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/i","pattern":"[url:value = 'http://196.190.224.62:36692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b0fceb-94a6-8992-90f1-000022a96713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e12396b-733e-6a01-e64e-00004dc99d13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8bd0d3-5723-eeff-f396-000080eb515b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/x86_64","pattern":"[url:value = 'http://31.77.227.121/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6a8921-f2ec-8174-9e18-00008adfc286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b5d23e-071b-1c17-baa6-0000d2866d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/ok","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c754263-a834-ba6d-3b96-00005cc7988f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/bin.sh","pattern":"[url:value = 'http://42.176.120.191:54769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a829a0-2197-c070-24d8-0000b145ac77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/i","pattern":"[url:value = 'http://123.8.54.39:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77e7cee2-6bb4-072b-7fb2-00003507cc0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/zombie_scanner.sh","pattern":"[url:value = 'http://149.50.154.101:8000/zombie_scanner.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0aa6e3f-4ad7-5495-d832-0000163ceb7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc79cdd1-d935-ddcd-a092-00002fb07aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm7","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0801d76d-abfd-d567-d4a4-00000d077e9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mips","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b3faf2-add9-d0fb-83dc-0000fe0d09c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mipsel","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21530e90-91aa-fec0-7a06-00006584d0bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1b2509","pattern":"[url:value = 'http://5.182.210.174/1b2509']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--213eb203-4528-806c-2421-0000e1a22a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81d27b","pattern":"[url:value = 'http://5.182.210.174/81d27b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c350f6ca-f226-e05e-967b-000041c34134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/785c9e","pattern":"[url:value = 'http://5.182.210.174/785c9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d009ab9c-5ce4-7857-fcac-00003450d96c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/905d94","pattern":"[url:value = 'http://5.182.210.174/905d94']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d8bb7b-f752-0474-9f5f-000023ebefa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0f62ad","pattern":"[url:value = 'http://5.182.210.174/0f62ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bcebb5a-9491-2eb8-4703-0000eeb07657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/becf65","pattern":"[url:value = 'http://5.182.210.174/becf65']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393d9097-dc4f-9ed7-7623-000025032de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/08bac6","pattern":"[url:value = 'http://5.182.210.174/08bac6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--881fae9e-1db5-60da-e30d-0000be774c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0a2c7","pattern":"[url:value = 'http://5.182.210.174/c0a2c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39108bd7-6720-4e9b-de94-0000b97037c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/813df0","pattern":"[url:value = 'http://5.182.210.174/813df0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2917f8-8823-c2dc-4abf-000008907b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/53ffdd","pattern":"[url:value = 'http://5.182.210.174/53ffdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddf6701-5c25-abda-e038-0000c9641d21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0589f","pattern":"[url:value = 'http://5.182.210.174/c0589f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169437be-d7f8-75b5-f05c-00005cd361cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d650b","pattern":"[url:value = 'http://5.182.210.174/0d650b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c017b42-b273-bc39-03bb-00003ca48cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/567d74","pattern":"[url:value = 'http://5.182.210.174/567d74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--387e8b1b-7559-2483-9178-00008bcf14bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/531853","pattern":"[url:value = 'http://5.182.210.174/531853']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2974784b-ff30-82b5-4dcc-00003837617d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/587199","pattern":"[url:value = 'http://5.182.210.174/587199']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d79aed6-c409-acf9-f30a-0000642f54ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c2baf","pattern":"[url:value = 'http://5.182.210.174/4c2baf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3167fb-917a-4f7b-3e7c-0000368524cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1067f5","pattern":"[url:value = 'http://5.182.210.174/1067f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aa2f8e-1251-fac6-e13d-00003bc20188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d1847","pattern":"[url:value = 'http://5.182.210.174/1d1847']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a778702a-34b3-52ec-1c4d-0000b04d06c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2301d","pattern":"[url:value = 'http://5.182.210.174/a2301d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3240eabc-d377-78a1-46bb-0000ea7f181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1882a","pattern":"[url:value = 'http://5.182.210.174/d1882a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446718-85de-1e4b-ef42-0000bd4ecfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae64e3","pattern":"[url:value = 'http://5.182.210.174/ae64e3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03084e34-7f22-fdc5-2973-0000b735e258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5f61f","pattern":"[url:value = 'http://5.182.210.174/a5f61f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9e67be-1114-a08b-364d-000006bdd58c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bba45d","pattern":"[url:value = 'http://5.182.210.174/bba45d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd3e098-698d-610d-03cd-000046d2dcfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110dc2","pattern":"[url:value = 'http://5.182.210.174/110dc2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073636f5-e511-80b5-d9d4-000001dff07e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.232.72.245:48281/i","pattern":"[url:value = 'http://45.232.72.245:48281/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3309eb45-d602-f4bb-4d86-000046719835","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/bin.sh","pattern":"[url:value = 'http://120.28.193.113:47622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0042c6a4-ed44-d7fd-6044-00002f75e066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/i","pattern":"[url:value = 'http://120.28.193.113:47622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24feea20-cfce-83e7-db9a-000032afc717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/bin.sh","pattern":"[url:value = 'http://115.56.57.92:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6656e4-4317-151b-b162-000012ad0312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D","pattern":"[url:value = 'http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b125705-ca86-23b3-4633-0000f4fe3df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/bin.sh","pattern":"[url:value = 'http://42.58.118.214:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e56d380-961b-3953-dc8d-00003d5e3c6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/bin.sh","pattern":"[url:value = 'http://115.55.130.196:43005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3f10f9e-7850-4495-58c8-00004ed90ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/ok","pattern":"[url:value = 'http://31.56.209.189:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e482aef-fa0c-d615-56cf-000041a4d797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/ok","pattern":"[url:value = 'http://31.77.227.130:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b62ec2-e95e-f454-cc9d-00004f58188c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/i","pattern":"[url:value = 'http://115.56.57.92:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49d6c35-6c24-fadf-1284-00009120a963","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.149.147:58354/i","pattern":"[url:value = 'http://42.224.149.147:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d548f8fe-900d-fcc8-909c-0000ef4eb9b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/i","pattern":"[url:value = 'http://219.155.168.189:41959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6ce778-a76e-64d0-aff1-0000fbaf3430","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/i","pattern":"[url:value = 'http://115.55.130.196:43005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2544ee-6a4e-b138-3496-0000881be65f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/bin.sh","pattern":"[url:value = 'http://210.208.110.51:46526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c072d-d33c-6eb7-5469-0000f4c80b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/bin.sh","pattern":"[url:value = 'http://219.155.125.9:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a2f35d-a00d-dda8-3d16-0000975b88cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/bin.sh","pattern":"[url:value = 'http://123.9.66.12:35690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9b63e3-7d2d-0edc-aa37-000076df5910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.253.249.237:5001/dip.exe","pattern":"[url:value = 'http://80.253.249.237:5001/dip.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453de80e-059e-aa67-8a14-000030275d14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/bin.sh","pattern":"[url:value = 'http://42.53.3.62:57366/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0860731-07e9-b8f3-4328-00009a457a7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/bin.sh","pattern":"[url:value = 'http://219.155.168.189:41959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545497f-987a-0bc3-d1c7-00008cd62bd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df64a3","pattern":"[url:value = 'http://5.182.210.174/df64a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dea911b-7342-5495-f7cf-0000cc80b95f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d9fc8c","pattern":"[url:value = 'http://5.182.210.174/d9fc8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197c36f-2fe0-c914-212b-000039414b78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8c2153","pattern":"[url:value = 'http://5.182.210.174/8c2153']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648b0486-ea91-fbf3-57f1-00000fc8bd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ce4957","pattern":"[url:value = 'http://5.182.210.174/ce4957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b748d-3a33-a71f-70ac-0000aa71f9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2a6c","pattern":"[url:value = 'http://5.182.210.174/7b2a6c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--274d5aab-f76d-b5c3-78b6-000069627ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878e23","pattern":"[url:value = 'http://5.182.210.174/878e23']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae78cf1d-1a96-747c-620a-0000f23447ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cabc7a","pattern":"[url:value = 'http://5.182.210.174/cabc7a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbb5a74-2946-3e7a-c3de-0000bb695a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a12c22","pattern":"[url:value = 'http://5.182.210.174/a12c22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdb5006-00dc-ea09-a899-00005b416f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2059d3","pattern":"[url:value = 'http://5.182.210.174/2059d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306d25ce-1312-6993-a989-0000b4b733d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/73c8e4","pattern":"[url:value = 'http://5.182.210.174/73c8e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41de2f7e-334c-4a77-9927-0000d96ec70b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1ad6dd","pattern":"[url:value = 'http://5.182.210.174/1ad6dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d66a88c-ca50-1be7-bbd9-0000de56558b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a7a53e","pattern":"[url:value = 'http://5.182.210.174/a7a53e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87cb14cc-eedf-f6fa-9882-00004edbe660","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/ePSDxHP52.bin","pattern":"[url:value = 'http://185.29.10.11/ePSDxHP52.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6427e730-4b1b-592e-ccaa-00006428701a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Menneskevrdige.csv","pattern":"[url:value = 'http://185.29.10.11/Menneskevrdige.csv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c784188a-03fd-a3e0-b319-0000701a045f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.48:48702/bin.sh","pattern":"[url:value = 'http://123.129.131.48:48702/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc4177b-aac1-ebf6-c0fb-0000355840fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/oojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/oojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde629c3-59f8-0a36-06bf-00006ab0b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2212531a-4936-05aa-ec64-000087e81cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/newcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/newcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6570e2-6cc9-2570-85bc-00004cf7addf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/KDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/KDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29da7776-221e-eb11-06ae-0000a272859e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojdcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojdcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddde9dda-aeed-b2af-8eaa-0000d1ecfe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/U1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/U1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91cfa744-f698-bd30-a38a-00006978952c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310bb013-8240-e7c9-da52-000099012f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e69140-fa03-7387-a237-0000a5df34fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/Ecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/Ecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1efbd70-5832-9b46-f224-0000c1590223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/cryptede.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/cryptede.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3019f306-1a0c-949b-ed96-0000ab012392","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc55aa0-0569-805d-1d2a-000086549b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5048f0cc-48ff-e7d4-580c-0000007802c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2bea45-f020-48ed-ed19-00008a0ae83e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aaacrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aaacrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e340a5-dfbc-0509-3ea4-0000e2bf2676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://archivoscrosoft.com/newrem.png","pattern":"[url:value = 'http://archivoscrosoft.com/newrem.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355d03a0-dc24-714d-aed8-000013f96671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/cat.sh","pattern":"[url:value = 'http://31.77.227.121/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0338dc-f737-d42c-d3d6-0000fe736421","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/k","pattern":"[url:value = 'http://31.56.209.189:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20df9246-6a3e-969e-b578-0000d57a9321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/i","pattern":"[url:value = 'http://42.53.3.62:57366/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f420da29-2df7-7c8b-04b9-000083533568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/k","pattern":"[url:value = 'http://31.77.227.130:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2685b0-6d25-e288-7631-0000a5d15223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/AFrlKy223.bin","pattern":"[url:value = 'http://185.29.10.11/AFrlKy223.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f82cdd4-2bb1-104b-1796-000003149302","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Supersensitizing.hhk","pattern":"[url:value = 'http://185.29.10.11/Supersensitizing.hhk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c813dfa-6ff2-d3ca-24e3-0000bc7248ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/i","pattern":"[url:value = 'http://115.53.209.13:43098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8880f18-ea22-1c2e-938a-000082b8a063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/i","pattern":"[url:value = 'http://123.9.66.12:35690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf1b047-e482-6e61-7310-0000afdcb224","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5371da7e-556b-3650-781e-0000f6cc6c98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326a4276-7356-3a6e-7407-0000cb22f4bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/vekselvises.asd","pattern":"[url:value = 'http://185.29.10.11/vekselvises.asd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e689d35-2a58-783d-c403-000051507f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/kLcvzhpr18.bin","pattern":"[url:value = 'http://185.29.10.11/kLcvzhpr18.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bece04a3-b2fd-ebeb-285f-000037f88c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b","pattern":"[url:value = 'https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6310ac7f-3ced-f3fd-2c94-0000b4de8921","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.148.152.143:8472/linux","pattern":"[url:value = 'http://8.148.152.143:8472/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151f0a74-d769-cad3-a75d-0000d0696048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://without.kesug.com/img_051425.png","pattern":"[url:value = 'https://without.kesug.com/img_051425.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83590611-490b-a9b3-638c-0000ad7fc2bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.149.187:51152/i","pattern":"[url:value = 'http://115.56.149.187:51152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1a7734-5be5-1a09-28b8-00004a081e04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417e0c2c-e4b4-d95a-d711-0000de29e95c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://essizs.com/img_170232.png","pattern":"[url:value = 'https://essizs.com/img_170232.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c27458-48e0-d462-9aa3-0000a8e02529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/75/wemadegoodthingsforbestforever.hta","pattern":"[url:value = 'http://204.44.69.222/75/wemadegoodthingsforbestforever.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb2da34-8edc-d2b8-2c83-000089acf7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_PRO.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0714a329-575c-2459-56bb-00005c1a0391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/saraka/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/saraka/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71197e0-07f2-c016-c892-00000924a9c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a009a8-396c-6de9-4df4-0000240951ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f8eb5e-4f21-bc61-9bb9-00009cb81668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png","pattern":"[url:value = 'https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5141ecc-625d-9250-dca6-0000a258c1cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.180.221.132/GMT/PAPAcrypted.ps1","pattern":"[url:value = 'http://38.180.221.132/GMT/PAPAcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698633aa-5425-71c2-2805-0000d029de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:53976/i","pattern":"[url:value = 'http://109.236.44.113:53976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010494a3-041a-8b84-1e0d-00003d082d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.109:54758/i","pattern":"[url:value = 'http://182.126.95.109:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b189c73-1e01-aa50-1100-00006c59cecc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.121.5.157/abc.sh","pattern":"[url:value = 'http://85.121.5.157/abc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f183c01-cc6e-9de1-b812-0000952bce1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/i","pattern":"[url:value = 'http://83.68.248.254:34464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11229e6b-43f0-d8ac-ae9a-00008a56870e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/bin.sh","pattern":"[url:value = 'http://83.68.248.254:34464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff66c82-5ed9-bd74-d00c-00008b51f96d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/bin.sh","pattern":"[url:value = 'http://110.36.1.200:43003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067f68fb-be10-3afd-dd9d-00002079549b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/codu","pattern":"[url:value = 'http://193.23.118.161/codu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f749494-ff75-0bab-6386-00004c29af26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.130.68:34461/i","pattern":"[url:value = 'http://105.186.130.68:34461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04584c89-fe41-6673-233b-000023eebc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/bin.sh","pattern":"[url:value = 'http://101.109.243.237:40041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6c75d9-0d6a-ff25-a15d-00006062ebff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/i","pattern":"[url:value = 'http://101.109.243.237:40041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d499666-0889-93e6-7fac-0000903726e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.246.20.26:46242/bin.sh","pattern":"[url:value = 'http://112.246.20.26:46242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c9a918b-7c20-77a8-5fc0-000061967092","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/bin.sh","pattern":"[url:value = 'http://59.103.116.68:42561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcbf35-75a8-1a68-5f65-000001806e4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/bin.sh","pattern":"[url:value = 'http://119.114.153.10:37040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2d54fa-05f4-a5bf-3e6d-0000d72d7776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/i","pattern":"[url:value = 'http://112.198.239.2:51852/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d7bf10-4f15-a669-aa98-000093ba13f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/bin.sh","pattern":"[url:value = 'http://125.41.228.207:54336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50424957-9ba9-9f2f-20cd-000024eca93b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/i","pattern":"[url:value = 'http://124.6.185.132:48257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077a9fa3-b09e-f255-a203-00006941a867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/bin.sh","pattern":"[url:value = 'http://60.18.9.255:60894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a007ab-a119-a931-5b38-0000b8ccc217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/bin.sh","pattern":"[url:value = 'http://112.198.239.2:51852/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62de2136-ff8e-1a0f-1f88-0000396436de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/i","pattern":"[url:value = 'http://115.48.148.140:53929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70a5ae05-da99-27d6-7970-000064854135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/bin.sh","pattern":"[url:value = 'http://115.48.148.140:53929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40bdd6d-1039-261b-c016-0000173d7fb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/i","pattern":"[url:value = 'http://110.36.1.200:43003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e34e8fb-fb2d-032c-fc61-0000faf454b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.54.119:55125/i","pattern":"[url:value = 'http://125.44.54.119:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8288530a-3e70-9ee9-6a76-00008b14c57f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.130:40967/i","pattern":"[url:value = 'http://210.208.110.130:40967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d3c90f-2b94-dade-d13b-0000fac8ed5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/bin.sh","pattern":"[url:value = 'http://180.191.122.115:56431/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca0a841-4ece-ad9c-9635-0000352637fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/i","pattern":"[url:value = 'http://111.164.68.144:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa51144b-31e4-2e8c-fda9-0000ba7b9112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.231:50864/i","pattern":"[url:value = 'http://27.37.100.231:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fd1cbf-f88b-b0b4-ed6b-00001f0f2f09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.192.200:49600/i","pattern":"[url:value = 'http://123.12.192.200:49600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4bac3d-19cf-b331-91b6-00003b79586a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.174.167:52736/i","pattern":"[url:value = 'http://42.227.174.167:52736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7cfb84-28ff-da23-62b2-0000bcb1f3ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.13.28:44703/i","pattern":"[url:value = 'http://115.63.13.28:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4b5596-6888-ec9a-8b32-00002b2ab068","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.6.209.122:60543/i","pattern":"[url:value = 'http://42.6.209.122:60543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f72e2c-616d-0d27-ce91-0000edff940f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/bin.sh","pattern":"[url:value = 'http://42.7.146.107:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc02b54-c8cc-bec0-f6a6-000072d7fca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.16.92:47673/i","pattern":"[url:value = 'http://175.107.16.92:47673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5d1e30-7f3b-2e9f-b2fb-00001186b243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/i","pattern":"[url:value = 'http://115.63.14.209:33264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04967bad-e8bd-6012-2e43-0000f0711dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/i","pattern":"[url:value = 'http://180.191.16.24:34228/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174522f5-c7ab-5943-17b5-0000e67d07bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/bin.sh","pattern":"[url:value = 'http://27.215.126.58:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d5d4a1-deed-02cf-e323-00003f215419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/bin.sh","pattern":"[url:value = 'http://219.155.225.195:37800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b295e6-4ed3-1532-ad75-0000704045cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/i","pattern":"[url:value = 'http://210.208.111.26:56098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85d2da56-b111-5d3f-b8d6-00008f4d8944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/i","pattern":"[url:value = 'http://219.155.225.195:37800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd18ecd-6656-6582-e8f1-000039d51715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.248.117:34689/i","pattern":"[url:value = 'http://110.39.248.117:34689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11e3a8d-e6dc-227f-17eb-0000c23d2ec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/i","pattern":"[url:value = 'http://182.124.253.104:42413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827b9954-44b1-d64e-2e98-0000f8975aa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.34.109.121:35275/i","pattern":"[url:value = 'http://118.34.109.121:35275/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043dd0f6-43ba-dc33-ebc1-00009c6fc3c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/bin.sh","pattern":"[url:value = 'http://115.50.50.133:53842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f282c0c6-db43-48ef-abb9-0000a9189aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/bin.sh","pattern":"[url:value = 'http://115.49.31.72:58726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e8d3fb-0ebb-b7ac-5d52-0000492325ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/i","pattern":"[url:value = 'http://140.237.37.41:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee91af9-f82d-8063-ba14-00002798ad18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/i","pattern":"[url:value = 'http://182.112.245.250:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b6e27af-5ef1-e833-22ff-0000569da1f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/i","pattern":"[url:value = 'http://115.49.67.185:47193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e229be20-1108-1cb4-5db2-0000f4cf18f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.173.181:58197/i","pattern":"[url:value = 'http://42.231.173.181:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89579714-e8cc-6f3c-bf68-000024569601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/i","pattern":"[url:value = 'http://180.191.122.115:56431/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beaa945a-c6d3-2cc1-a8b8-0000b673eb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/i","pattern":"[url:value = 'http://42.231.67.26:56479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6fa0a8-50e7-0637-ee60-00005017897a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/bin.sh","pattern":"[url:value = 'http://116.138.244.27:55282/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b4e76c-19e9-c9bc-60f9-000068886574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.17.247:35288/i","pattern":"[url:value = 'http://219.155.17.247:35288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5da96f-ea5a-e76e-4ed0-0000dde2e371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/bin.sh","pattern":"[url:value = 'http://140.237.37.41:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e18d73-d402-9de4-bba7-0000fbe1a79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/bin.sh","pattern":"[url:value = 'http://27.206.197.243:34685/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da58e7a-3e08-5a18-c8ed-0000aeac4a07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.111.17:45464/i","pattern":"[url:value = 'http://175.148.111.17:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9f3589-2c9b-be54-8c8f-0000d813299c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/bin.sh","pattern":"[url:value = 'http://115.63.14.209:33264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eafc9a47-73b3-fa40-f36f-0000be0602a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/i","pattern":"[url:value = 'http://42.7.146.107:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a010d4f1-fe13-927f-bd88-0000b8934c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/bin.sh","pattern":"[url:value = 'http://111.164.68.144:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae6c07-7aff-adcd-e91b-0000091ff91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:41764/bin.sh","pattern":"[url:value = 'http://78.178.118.193:41764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00469f21-40a0-9a81-dcd4-0000a49f1b09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/bin.sh","pattern":"[url:value = 'http://193.31.201.20:33068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2560add0-2924-f94f-6e89-00002fe4d347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/i","pattern":"[url:value = 'http://193.31.201.20:33068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c3af1-47cb-fdb8-adad-000071d8de4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/bin.sh","pattern":"[url:value = 'http://124.6.185.132:48257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2805daf5-13c3-f9cb-13bd-00004cc42da7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/i","pattern":"[url:value = 'http://115.50.50.133:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ffacb5-00a9-9ba3-342a-00001853651a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/bin.sh","pattern":"[url:value = 'http://115.49.67.185:47193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27e0a22-5a81-1744-0b00-000082ed6373","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.183.175:50468/bin.sh","pattern":"[url:value = 'http://123.14.183.175:50468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612ee0e3-9dad-98ea-161a-0000dd7ad515","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/bin.sh","pattern":"[url:value = 'http://110.37.106.220:47631/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b180caae-c61f-d955-244a-0000fb3d8991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/i","pattern":"[url:value = 'http://59.103.116.68:42561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceaf5c6-dd13-6170-2cff-00004840b1ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:50485/i","pattern":"[url:value = 'http://115.55.179.35:50485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c1573-6b16-aa4f-9424-0000817529d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/i","pattern":"[url:value = 'http://116.138.244.27:55282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10067444-6ed5-a7fe-888a-000021d57965","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/bin.sh","pattern":"[url:value = 'http://110.37.44.119:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d62b392-4147-54bd-a932-000066b5d4b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/i","pattern":"[url:value = 'http://58.252.113.28:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e06604c-7dd4-3aff-56fb-00000168ffc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/i","pattern":"[url:value = 'http://110.37.44.119:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5713edf1-ebdd-5d58-1d8a-00002f1e9061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://88.254.51.229:57095/i","pattern":"[url:value = 'http://88.254.51.229:57095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02391cc-29a6-f92d-08b1-0000a6fee043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.238.173:38540/i","pattern":"[url:value = 'http://42.232.238.173:38540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca3c361-e43b-525e-768c-0000126b925a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.157.30:34623/i","pattern":"[url:value = 'http://175.148.157.30:34623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782f9ef6-c8dd-d8d8-2dc1-0000012cd079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/bin.sh","pattern":"[url:value = 'http://61.137.193.167:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1c21b3-02c1-d827-65ae-0000abf04cc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/bin.sh","pattern":"[url:value = 'http://210.208.111.26:56098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc40850-cfc6-fbbb-1c8f-0000cc1ae7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/i","pattern":"[url:value = 'http://115.49.31.72:58726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13450eea-48f5-874b-510f-0000c836885a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/bin.sh","pattern":"[url:value = 'http://115.63.242.52:38396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cefc9e9-6796-0952-98ef-000078c83d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/i","pattern":"[url:value = 'http://27.206.197.243:34685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79cd375-52d1-a489-843f-0000f5e0a671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/i","pattern":"[url:value = 'http://42.237.123.108:59063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60c6a35-93b8-375b-ccc9-00004072ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/i","pattern":"[url:value = 'http://115.48.8.75:42853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331190f2-3079-284c-7863-000059c748cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/i","pattern":"[url:value = 'http://125.112.61.39:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93551e3-14b0-f134-521e-0000aac183c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/bin.sh","pattern":"[url:value = 'http://42.237.123.108:59063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ad88afd-4ef2-382c-52a0-0000000e8f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/bin.sh","pattern":"[url:value = 'http://182.112.245.250:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe8548-a377-300d-c0a6-0000960e2a91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/i","pattern":"[url:value = 'http://115.63.242.52:38396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632e49c1-b382-cf70-bf36-000099764039","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/i","pattern":"[url:value = 'http://119.114.153.10:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349b1c24-7fed-7f6d-1c99-00004a98bc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/bin.sh","pattern":"[url:value = 'http://71.207.128.92:54954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ad7489-7861-6af0-8fd3-0000f9a606f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/bin.sh","pattern":"[url:value = 'http://125.112.61.39:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0483798-99b8-e043-6104-0000ef76c5c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/i","pattern":"[url:value = 'http://125.46.213.70:47197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27dbadc5-c5f6-a739-1015-000069bad8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.194.151:60883/i","pattern":"[url:value = 'http://124.94.194.151:60883/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--686d1696-5518-7714-4405-0000227329b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.221.231.180:37749/i","pattern":"[url:value = 'http://27.221.231.180:37749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f85f118-75d1-fef1-f098-00007636101a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/i","pattern":"[url:value = 'http://123.13.30.198:35585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbdac37-56aa-be31-54f9-000062308a50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/bin.sh","pattern":"[url:value = 'http://123.148.140.58:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f1960a-8c41-2ed6-b2a9-000014402fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.167.208:59256/i","pattern":"[url:value = 'http://42.239.167.208:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d7f6f7-b090-1669-1056-00001eac21a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/i","pattern":"[url:value = 'http://123.148.140.58:43457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1049eaac-8cd0-f801-e070-00008f8503e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/bin.sh","pattern":"[url:value = 'http://115.48.8.75:42853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f9c054-f0c0-ad6c-8945-000090585e70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.9.132.41:50484/i","pattern":"[url:value = 'http://175.9.132.41:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cda74a2-ebe4-d9d3-a2a4-000003df4bb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/i","pattern":"[url:value = 'http://182.121.179.219:53168/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e9562b-9c64-cc8c-ecff-0000f5594c56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/bin.sh","pattern":"[url:value = 'http://58.252.113.28:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76ea7f3-35dc-f4c7-5393-000008b8eee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.229.46.13:57947/i","pattern":"[url:value = 'http://113.229.46.13:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f671a93c-6117-bea7-5818-000081c01fa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://trueinggrik.com/QuickFetch.exe","pattern":"[url:value = 'https://trueinggrik.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d10bd1-8b58-dde8-9729-00006a1d21d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.170:52720/bin.sh","pattern":"[url:value = 'http://182.117.68.170:52720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de28c8e3-3411-5101-1b7e-00006944de35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/i","pattern":"[url:value = 'http://112.240.173.194:59049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fed479b-4557-7012-69ef-000064b35587","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/bin.sh","pattern":"[url:value = 'http://180.191.16.24:34228/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63febe48-91ed-6f9c-82be-0000aabcc598","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/bin.sh","pattern":"[url:value = 'http://112.240.173.194:59049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a823b098-7d63-74f6-c5d1-000041d47384","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/bin.sh","pattern":"[url:value = 'http://95.106.249.19:11817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfffcae-518e-8bc7-dc20-0000b29b7484","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/i","pattern":"[url:value = 'http://95.106.249.19:11817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775984fc-539c-c383-7b29-000005f07b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://export.kesug.com/img_212250.png","pattern":"[url:value = 'https://export.kesug.com/img_212250.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef685e7a-7ad9-7af6-06a5-0000ca413177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/bin.sh","pattern":"[url:value = 'http://42.235.6.8:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d5e8c9-1ebe-3c45-05e2-00000a16b786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98e8365-9f29-8e41-5753-0000a0c42903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--858e96b1-4603-e585-c157-00001df152b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d5fd1d-b9eb-702a-47da-0000b723cc32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735f38d6-a34b-0c38-55f4-00009139fcc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe887a5d-c37e-b72c-cff5-0000a6a162dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsel","pattern":"[url:value = 'http://94.154.43.76/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340d76ee-d844-b043-349d-000050de1afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/a.sh","pattern":"[url:value = 'http://94.154.43.76/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13df92b2-73ca-e48e-615a-000067b7481e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72754ec7-5d84-ecf0-4540-00002e032221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8bbcd8-c5ad-8169-ddef-000045f69ab1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.201/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd8b90e-db47-d02e-3bf6-000043e727e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64d8a224-02e8-66d0-f720-0000df0b2f7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24f6eca-2564-afc0-b8f4-000075534ca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv7l","pattern":"[url:value = 'http://94.154.43.76/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80790c48-40ea-c28b-a855-00000f931fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv5l","pattern":"[url:value = 'http://94.154.43.76/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd1f39e-34aa-201e-d6c1-0000cdbe8095","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0158f09c-9850-e984-25c7-000071733c40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.201/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a7880e-377e-ed58-ed25-000045004c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd15b32-cf45-383f-873d-00007b0212c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc609409-2f93-2a22-7cd2-0000a33850db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740a12cb-4bd5-026f-1515-0000f1ada5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a292b1-fff7-8191-da47-00004b45fb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mips","pattern":"[url:value = 'http://94.154.43.76/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ee603a-2a9d-dda3-517e-0000ffc581e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.x86_64","pattern":"[url:value = 'http://94.154.43.76/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab545f8b-4d08-b8c4-b9f4-000048336512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv6l","pattern":"[url:value = 'http://94.154.43.76/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a483bb1d-ef65-844e-ed27-00009308d0c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.246/svchost.exe","pattern":"[url:value = 'http://217.60.241.246/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b82305-b199-2947-ee39-000089aecbc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764cac92-1821-31f7-72d7-00007739d718","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99623d09-046b-5a33-511b-000032f33672","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv4l","pattern":"[url:value = 'http://94.154.43.76/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40de9b3c-8617-db4e-a8f0-00002ad9f518","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/i","pattern":"[url:value = 'http://42.235.6.8:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--917266c2-d3b6-917f-305b-0000ebf1db20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904f095d-fe7e-c270-2d19-0000a7b31f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/debug_main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7583c63f-ad71-6555-cc5b-000032504524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487500dc-7958-afbf-a7f7-0000508a0c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554251cb-9f4a-6e71-156a-000052fe70f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7c615-f724-4f12-90cf-00003b89624b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b44725fd-0fed-00be-8e83-00004921a14d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa62cf24-3d44-e98b-606f-000024ec60cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745bfd58-154a-c14e-1ca2-0000cb722d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/debug.dbg","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a5ec7f-ad4c-8b5a-54b3-0000ffac8117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18bf2c3-f7fd-e60e-1d2d-00003b7fb491","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097f4168-46d1-d706-41e9-00009b6acdd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec76c6f-c66a-cb52-d0a6-00007bb5bae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29dfdca9-5bb2-8c4b-79aa-0000193e663e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed8ec3f-1747-f013-e136-0000a182015b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48b9849-d2af-f87f-f578-000048cfa9af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca7f664-a0cd-ac13-0177-0000b1fc56ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d1bd85-8044-ca38-5073-0000b337aeb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm5","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35379f3-3649-e11c-ab90-00004f6b4a15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/spc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c115c7aa-1c55-3457-1566-0000c9ff38bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb6c099-5ea1-e0bf-0c49-0000ef4c0748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sh4","pattern":"[url:value = 'http://94.154.43.76/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3436890b-1236-f462-c71f-0000ddd81ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.arc","pattern":"[url:value = 'http://94.154.43.76/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c563717-ccb1-322a-496e-0000ff10a4e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sparc","pattern":"[url:value = 'http://94.154.43.76/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8158b4-516f-4ab2-5dd6-0000defc7773","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.powerpc","pattern":"[url:value = 'http://94.154.43.76/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b2c817-26de-d8a6-e340-0000cb537fdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.i486","pattern":"[url:value = 'http://94.154.43.76/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09aabc-9a8d-74fc-606a-00001506ae20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ea667-60a5-c954-b2d8-00004bb32db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.m68k","pattern":"[url:value = 'http://94.154.43.76/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f17f9e-a697-612c-8088-000061e677ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.76/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0156c4a4-c68d-dff1-72a8-000007995698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/bin.sh","pattern":"[url:value = 'http://60.189.111.145:37976/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df82d7c0-0db9-ec50-66a6-0000a81662e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/k","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c8952d1-a9ed-5da0-b4fc-000064d41ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/i","pattern":"[url:value = 'http://60.189.111.145:37976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba62983-21c9-3261-6e24-00006cf679ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:43963/i","pattern":"[url:value = 'http://112.238.178.200:43963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bdc8ee-2b54-b171-b9f2-0000e1f92ae2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/bin.sh","pattern":"[url:value = 'http://110.39.228.78:49446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1daab-07ca-67b1-e916-0000ab583801","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/i","pattern":"[url:value = 'http://110.39.228.78:49446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be8088f-c19c-5046-e7b7-00007817f9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7646424755/gX8992r.bat","pattern":"[url:value = 'http://62.60.226.140/files/7646424755/gX8992r.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1764f6f-3f04-06e5-c784-0000797a4e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.103.246:42822/i","pattern":"[url:value = 'http://27.37.103.246:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4784a5-e860-9e64-8944-00009c925325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e33c49e2-be07-d9b4-dd20-000050c4c948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/tzb10mmujurn","pattern":"[url:value = 'http://192.162.199.249/tzb10mmujurn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b1818c-b9ff-b433-0b6c-000082a78ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/y6b3fuzj0w6pt97e","pattern":"[url:value = 'http://192.162.199.249/y6b3fuzj0w6pt97e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fa3049-b8db-fdfd-87ed-00000913de02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/x86","pattern":"[url:value = 'http://154.90.70.23/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3a53a6-5fb8-7843-b1c5-00007e19b387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/m68k","pattern":"[url:value = 'http://176.65.139.228:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df672c76-dcba-9140-c5a9-00004eedcec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b591a12b-e644-9634-859a-0000f07ac260","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/sh4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466e7dcc-9f2b-6464-a3b3-00005c586128","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm7","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c3437c-dcea-6368-d465-000070a45b96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/ppc","pattern":"[url:value = 'http://176.65.139.228:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31694d5a-dc7b-5f74-7c75-0000e4e4064d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm6","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52af87b5-dae5-bde3-920b-00000548c9f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/ezaenul9","pattern":"[url:value = 'http://192.162.199.249/ezaenul9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f2041b-0824-c98c-fead-0000d3da5f7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/8w6vq50fsu","pattern":"[url:value = 'http://192.162.199.249/8w6vq50fsu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b86782-8fe5-e063-a16f-0000f9c14cab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/1edjop4tlj2d","pattern":"[url:value = 'http://192.162.199.249/1edjop4tlj2d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f8db96-d481-68bc-ab63-0000dc42e727","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/zeb8cgwmkkpvu7pc","pattern":"[url:value = 'http://192.162.199.249/zeb8cgwmkkpvu7pc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b38603e-c70e-5647-1284-0000977c5e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/1vo6lm4y50k3ww0f","pattern":"[url:value = 'http://192.162.199.249/1vo6lm4y50k3ww0f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2751215c-34f6-a53c-64cc-00000123e6dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://flooriscoveringworld.com/BOBBIN.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/BOBBIN.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c07062e-c1b1-1a59-bd86-00000e9b1c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1558f4c-1e7e-3418-6dcd-00002aec1034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/8jot5vdohds0imt4","pattern":"[url:value = 'http://192.162.199.249/8jot5vdohds0imt4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe878897-2264-6de7-81c2-00008cacefe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/bin.sh","pattern":"[url:value = 'http://61.53.219.139:36865/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc69ef81-a2e4-e14e-44c6-0000f909021a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/i","pattern":"[url:value = 'http://61.53.219.139:36865/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7016cfd9-99bc-6754-54e3-0000ce9835b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/bin.sh","pattern":"[url:value = 'http://175.146.6.50:52389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90859175-0bce-9364-7ea2-000053c42371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/bin.sh","pattern":"[url:value = 'http://123.14.73.174:46201/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--388a4911-2fce-e808-31e7-0000c54412a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.67.33.209:34699/i","pattern":"[url:value = 'http://80.67.33.209:34699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd49391c-a57f-79fd-10d4-0000e0ce6b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/i","pattern":"[url:value = 'http://123.14.73.174:46201/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee7b6c-089d-02ad-a220-00003ec21826","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/i","pattern":"[url:value = 'http://175.146.6.50:52389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de07606-73f4-21fe-0fb2-000029940589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.59.112:44682/bin.sh","pattern":"[url:value = 'http://42.53.59.112:44682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b1fb6-aba5-6d9c-69db-0000044641af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/bin.sh","pattern":"[url:value = 'http://196.189.3.1:42472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d3c2e3-2921-9317-8351-0000b9c41d60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f9c7b","pattern":"[url:value = 'http://5.182.210.174/3f9c7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb44524c-a816-f7ea-e476-000074ca8bbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/659716","pattern":"[url:value = 'http://5.182.210.174/659716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d943da75-5aef-cdde-71cd-0000324ed273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ec54e5","pattern":"[url:value = 'http://5.182.210.174/ec54e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db4a6d7d-ced8-5346-131e-0000ee050312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5f1c","pattern":"[url:value = 'http://5.182.210.174/5b5f1c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ba63bc-4b7b-8369-d10b-00005d562025","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/068f87","pattern":"[url:value = 'http://5.182.210.174/068f87']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac224e04-e0a7-b7e8-c8a7-000048e5ceb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/126678","pattern":"[url:value = 'http://5.182.210.174/126678']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fd4525-9ddf-14fc-ed2f-000084f2f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b59af2","pattern":"[url:value = 'http://5.182.210.174/b59af2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab20224-56ce-080d-7478-0000dc6b1b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/341d04","pattern":"[url:value = 'http://5.182.210.174/341d04']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448540d6-cf16-6ae0-89c1-000010d934c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/085175","pattern":"[url:value = 'http://5.182.210.174/085175']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa5b051-09ab-f67b-dd2a-0000db71f8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f971dc","pattern":"[url:value = 'http://5.182.210.174/f971dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b877778-c3b1-2c68-2d91-0000bd3685ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfde3b","pattern":"[url:value = 'http://5.182.210.174/bfde3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b794cac-98e4-25b8-4d4c-0000510128a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2778ce","pattern":"[url:value = 'http://5.182.210.174/2778ce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c108b07-3ae3-59fc-5080-000034f90243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b0a2e4","pattern":"[url:value = 'http://5.182.210.174/b0a2e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf67f02-8761-9082-8890-00000b8ba35b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b2f83","pattern":"[url:value = 'http://5.182.210.174/9b2f83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd2c507-b5e1-b133-9e69-00002f69c303","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/27f7dd","pattern":"[url:value = 'http://5.182.210.174/27f7dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ae8bd9-dab5-a764-24e7-00009f37849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1096dc","pattern":"[url:value = 'http://5.182.210.174/1096dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f0bc36-3777-f8b9-158b-0000215dcfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm5","pattern":"[url:value = 'http://154.90.70.23/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfedd1a-3c9e-9138-87ce-00008b54072d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm7","pattern":"[url:value = 'http://154.90.70.23/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1d183c-0c2c-2505-0d14-0000381aad86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b318c0","pattern":"[url:value = 'http://5.182.210.174/b318c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e708d-fad0-ea14-da95-000025130a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a8ac8a","pattern":"[url:value = 'http://5.182.210.174/a8ac8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3347e95f-0b85-9834-1a37-0000f492b086","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/33d663","pattern":"[url:value = 'http://5.182.210.174/33d663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92c1251-c7bb-0b59-1ee7-0000d3241dc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be1fde","pattern":"[url:value = 'http://5.182.210.174/be1fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b886c7a6-2da2-1d2b-29c6-0000a9e30358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mips","pattern":"[url:value = 'http://154.90.70.23/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411b488a-bec3-fe9e-f74d-0000aa11d758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb2746","pattern":"[url:value = 'http://5.182.210.174/eb2746']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82e8fb0-77cb-a480-f233-000051e5322d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/194957","pattern":"[url:value = 'http://5.182.210.174/194957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97600ffc-2c98-42ea-8c7b-00008282b21a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/67f55e","pattern":"[url:value = 'http://5.182.210.174/67f55e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c594e6c-6d70-805b-28de-0000c9f6fc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c747be","pattern":"[url:value = 'http://5.182.210.174/c747be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--661ff4f7-1ef4-c71b-4e8a-0000b92509d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/i","pattern":"[url:value = 'http://196.189.3.1:42472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5532ea74-e0a6-88b4-9fa3-0000cbc8cf91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/i","pattern":"[url:value = 'http://115.57.44.181:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f13e747-6cd5-c4fe-8708-00001422fa71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.231.45:33771/i","pattern":"[url:value = 'http://105.186.231.45:33771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1a335-ea08-66f6-733f-0000a2286f44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/bin.sh","pattern":"[url:value = 'http://115.48.136.66:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86da0bb-da44-c686-4e7a-0000a079f5ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c5f370f-de58-724a-fb72-000094f9eede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d26c3c-5b0d-970a-6709-00007892ce3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/i","pattern":"[url:value = 'http://115.48.136.66:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830ed02e-2c9c-458e-5c8e-0000a025c6df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.188:46150/i","pattern":"[url:value = 'http://182.117.68.188:46150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59aae0c9-c518-515f-cd0c-000002755122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/i","pattern":"[url:value = 'http://138.204.196.136:51078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9c1449-a1fb-ca99-0624-00005c2afb77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/bin.sh","pattern":"[url:value = 'http://120.84.214.85:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac6a726-a86f-20a4-7b41-00005bf7329d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/i","pattern":"[url:value = 'http://120.84.214.85:32896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2349ff24-c8cc-8862-3c0c-00005716aff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.72.79:33457/i","pattern":"[url:value = 'http://182.120.72.79:33457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bbb9bc-91c9-082d-c4bb-000051863dda","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/bin.sh","pattern":"[url:value = 'http://119.185.241.8:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--176b9e53-d284-2e98-933e-0000af2eca14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/i","pattern":"[url:value = 'http://119.185.241.8:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d728e9-ad7d-6d02-a12e-000017af4785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.168.69.141/p.sh","pattern":"[url:value = 'http://83.168.69.141/p.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2dbe79-abcf-48b2-1e49-000090cfc9ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/bin.sh","pattern":"[url:value = 'http://42.225.56.37:44489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b4859d-7f0a-ce27-afe3-00008b457561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/i","pattern":"[url:value = 'http://42.225.56.37:44489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21e1f45-78e1-8a21-ea5b-0000b572398a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/rvn.exe","pattern":"[url:value = 'http://178.16.54.109/rvn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fba5bde-4fa7-28df-bb2a-0000019a8386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/bin.sh","pattern":"[url:value = 'http://123.8.54.39:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e88501-6f34-e1e9-7e0c-00001d91296d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ccd071-31f7-bbda-1f79-0000b2af0c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:48818/i","pattern":"[url:value = 'http://196.189.35.172:48818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b498b6-a675-302d-de36-00004031b0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.94.15:56422/i","pattern":"[url:value = 'http://163.142.94.15:56422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fee29e-b0a6-c0cd-e353-000035b69e36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda73828-1a47-cd1f-b2d7-00009d05d88b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278e7475-922f-7a5e-b2e2-0000e71ffde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.93.89.72/wget","pattern":"[url:value = 'http://185.93.89.72/wget']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33844ca-a2b4-50a4-1f8a-0000d4596404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102ca43c-ca82-5015-ae86-000021b44c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf40cd4e-9359-1b1b-9da8-000086fa0d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a36910d-6268-cb7b-57e5-00005b4ef805","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/iokasg181fteasmm.nce","pattern":"[url:value = 'http://151.241.154.105:8888/1/iokasg181fteasmm.nce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6882a095-c182-3a3e-32c8-0000a21f6138","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn","pattern":"[url:value = 'http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc547c44-9d3d-ca5b-d134-00006c69c319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f38155-d64d-8b0a-8ac5-0000982da349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caa97b6-1401-7c46-ce01-00003da691ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45fb7d","pattern":"[url:value = 'http://5.182.210.174/45fb7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8169458-197c-9acb-3eb8-00007720c051","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1cc53b","pattern":"[url:value = 'http://5.182.210.174/1cc53b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db67581-c81e-227c-3236-000064cbaf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/140e8d","pattern":"[url:value = 'http://5.182.210.174/140e8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93fa924b-37ee-c2c6-6bcc-000096a6d486","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86361f","pattern":"[url:value = 'http://5.182.210.174/86361f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5539491-f710-194b-6b25-0000efe8d8dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/938392","pattern":"[url:value = 'http://5.182.210.174/938392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06237a6a-239a-2cbd-bbed-0000c681eb50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cea41","pattern":"[url:value = 'http://5.182.210.174/3cea41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3315ae1-e862-08db-1746-00004ddc4a1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/989926","pattern":"[url:value = 'http://5.182.210.174/989926']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c701a77a-2c41-c891-4e25-00003b51b257","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ea0","pattern":"[url:value = 'http://5.182.210.174/340ea0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7403d89b-6097-a5e0-8565-0000d5d80c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a041d7","pattern":"[url:value = 'http://5.182.210.174/a041d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b98ae7f-3d31-d4e0-4b92-0000658be0d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d085b","pattern":"[url:value = 'http://5.182.210.174/2d085b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d89e8f-e6aa-f346-5488-000079d5e451","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b60846","pattern":"[url:value = 'http://5.182.210.174/b60846']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09191158-1dd4-a750-81b5-0000a16bb17f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2fa8f","pattern":"[url:value = 'http://5.182.210.174/a2fa8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e57f7-0695-403b-7ce6-00006dd1e667","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b94fb7","pattern":"[url:value = 'http://5.182.210.174/b94fb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb5917-0ca8-43a4-a1f5-00008ad00d3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cddd60","pattern":"[url:value = 'http://5.182.210.174/cddd60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2491f318-607c-f999-b9bc-00005edaa6ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/11ac33","pattern":"[url:value = 'http://5.182.210.174/11ac33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e9f3f2-1b13-5af0-460f-0000a4710ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/428768","pattern":"[url:value = 'http://5.182.210.174/428768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b42979-6ad1-b4c6-85c6-0000271cfeba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d27e5","pattern":"[url:value = 'http://5.182.210.174/7d27e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3864f346-7bf5-336f-8a96-0000f52fa3db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/533721","pattern":"[url:value = 'http://5.182.210.174/533721']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d00cf28-6758-cfef-ad5c-00008e4a991a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83792e","pattern":"[url:value = 'http://5.182.210.174/83792e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3390cab-c425-9cd1-d068-0000d2eb3098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5e3a4","pattern":"[url:value = 'http://5.182.210.174/e5e3a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c022128b-55ab-9e8b-a13e-0000b4828038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/55a639","pattern":"[url:value = 'http://5.182.210.174/55a639']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec07c45-e8aa-4a34-f5ad-00009ac9fe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ced603","pattern":"[url:value = 'http://5.182.210.174/ced603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99163c40-e25b-8539-50df-000003cb0459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/818df1","pattern":"[url:value = 'http://5.182.210.174/818df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979641f9-497c-2343-1690-0000be6d4553","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sh4","pattern":"[url:value = 'http://217.60.195.127/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff989ce-126c-7e1f-c7e6-000041679771","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.i486","pattern":"[url:value = 'http://217.60.195.127/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3141626-9c0d-319e-0421-0000cef41ee5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sparc","pattern":"[url:value = 'http://217.60.195.127/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c04822f-a5c8-f73c-2d1f-0000c9bf7adf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.mipsrouter","pattern":"[url:value = 'http://217.60.195.127/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c5e7be-0eff-4d05-c299-0000c187c516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.m68k","pattern":"[url:value = 'http://217.60.195.127/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b5b01a-052a-f400-8ae4-0000ba098ac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.powerpc","pattern":"[url:value = 'http://217.60.195.127/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf89588e-9dec-23eb-e218-0000f9db9f33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd412f","pattern":"[url:value = 'http://5.182.210.174/bd412f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d805ea1a-1872-897b-2005-0000313c8c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c819f","pattern":"[url:value = 'http://5.182.210.174/2c819f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a8269b-2bfc-7a4f-0edd-00001ee3ba00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e19e6a","pattern":"[url:value = 'http://5.182.210.174/e19e6a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8807631c-b5c5-2d4d-d4d9-000031feb2f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae1209","pattern":"[url:value = 'http://5.182.210.174/ae1209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49bf9a9-d6dc-a118-76fc-0000807c33cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/820635","pattern":"[url:value = 'http://5.182.210.174/820635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70d5a6ba-f005-2059-d1eb-0000325b032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/85c412","pattern":"[url:value = 'http://5.182.210.174/85c412']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d244a60-1fb3-526e-93c2-00008a34cdcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb1880","pattern":"[url:value = 'http://5.182.210.174/eb1880']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080072b6-915c-6796-00c8-000028acdc70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f7598","pattern":"[url:value = 'http://5.182.210.174/3f7598']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56520bb9-2899-bb92-6a8b-000058686974","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea1763","pattern":"[url:value = 'http://5.182.210.174/ea1763']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a843a6e7-1cce-f658-2647-00004f538866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1da29","pattern":"[url:value = 'http://5.182.210.174/c1da29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c82efabf-9549-8510-0fe2-000008f1f8b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/446eba","pattern":"[url:value = 'http://5.182.210.174/446eba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3978c144-e9c1-7ccf-95db-00000fda7f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1832e","pattern":"[url:value = 'http://5.182.210.174/d1832e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11576a1c-ca6c-cf8d-ecfb-00008b5758d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/935428","pattern":"[url:value = 'http://5.182.210.174/935428']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea0732f-d27e-982c-59e3-000015a3cde0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/i","pattern":"[url:value = 'http://162.246.26.77:54746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8136a7f-004a-6d6a-8d61-0000b077a898","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://15.204.176.145/xmrig.exe","pattern":"[url:value = 'http://15.204.176.145/xmrig.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e42fd61-daa0-0016-cb65-000084a35b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.104.147/d/build_x64","pattern":"[url:value = 'http://87.120.104.147/d/build_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2342f0-8cf8-6101-6737-0000219a6a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://frtkvnpa.xyz/crypted.ps1","pattern":"[url:value = 'https://frtkvnpa.xyz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4ee807-4e90-1639-99d9-0000f6fa4603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojkcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojkcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ccd6fe-75c0-f4bc-0387-00000e9cf7b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/bin.sh","pattern":"[url:value = 'http://182.127.64.81:42389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841fb122-cec9-5a11-bedf-0000bf6945a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/i","pattern":"[url:value = 'http://182.127.64.81:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09531390-b484-644f-e19c-00009ae8bc8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb033d36-40a7-db05-24a5-00002771c543","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?","pattern":"[url:value = 'https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b0713-a1d7-2718-27b4-00002f320743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe","pattern":"[url:value = 'https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e686e3a1-6f64-f074-38de-00005d44f425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mbcasesores.com/tap/BBVA_pdf.zip","pattern":"[url:value = 'https://mbcasesores.com/tap/BBVA_pdf.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e470077-719e-476b-0884-00004d70ef36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:39029/i","pattern":"[url:value = 'http://110.36.13.229:39029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56018c1-3f8f-dbf3-9cd5-0000abb2402d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/bin.sh","pattern":"[url:value = 'http://115.61.107.237:53984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad04935-9894-0e4d-acd8-000071be4467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:47068/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451c9414-4f9b-8995-dd76-0000ee755d16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/bin.sh","pattern":"[url:value = 'http://59.96.138.212:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f027648-2952-c708-2047-00001d942615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/i","pattern":"[url:value = 'http://59.96.138.212:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f856849d-b16e-fe34-5fd0-0000dc5ac77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/bin.sh","pattern":"[url:value = 'http://182.122.193.178:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ed422-d8fc-229b-d8a2-00009d568b81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/i","pattern":"[url:value = 'http://182.122.193.178:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e714258-246f-522e-82c1-0000739456e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.239.221:32941/bin.sh","pattern":"[url:value = 'http://115.52.239.221:32941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab40c9de-dd73-84c7-0bb8-00001f8570a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.121.142/a3f8d2/kaizen.arm","pattern":"[url:value = 'http://196.251.121.142/a3f8d2/kaizen.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f44332e-d50f-a3b9-4025-0000437fce62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/i","pattern":"[url:value = 'http://27.156.154.3:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb34f84-3254-0bb9-4375-000037c34785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/bin.sh","pattern":"[url:value = 'http://27.156.154.3:40709/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b405e4b0-4bdf-6ba9-d555-00007b50796d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/bin.sh","pattern":"[url:value = 'http://103.31.103.204:42349/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d0c8acf-2a76-7313-7a45-0000a65fa834","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/i","pattern":"[url:value = 'http://113.231.9.63:39328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--405af7c0-43d1-3549-0366-0000b59a1c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/i","pattern":"[url:value = 'http://115.61.107.237:53984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0551682b-d2fb-2b55-d71d-000071266c67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.115.246.124:41208/i","pattern":"[url:value = 'http://119.115.246.124:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07521553-3aab-5b52-6f95-0000285c038c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/i","pattern":"[url:value = 'http://182.126.117.59:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9b44c8-8e3c-1185-7397-000098024235","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/bin.sh","pattern":"[url:value = 'http://182.126.117.59:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf8967-c037-d843-a537-0000587464e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/i","pattern":"[url:value = 'http://103.31.103.204:42349/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee6d220-87ee-ce86-e801-0000365ce3d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/i","pattern":"[url:value = 'http://24.95.54.96:47647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0092fb28-1b54-2af6-6577-00002b6198e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/bin.sh","pattern":"[url:value = 'http://211.158.166.117:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189faae8-dd98-2c2a-0d31-000067df1e18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/bin.sh","pattern":"[url:value = 'http://24.95.54.96:47647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9d4b0c-a4e5-d142-a218-0000605fc526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/i","pattern":"[url:value = 'http://42.224.70.213:38527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee221c3-f2ff-d3b7-7c35-0000a504fb1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/bin.sh","pattern":"[url:value = 'http://116.138.249.233:41996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad21749-0c5c-e8d6-ee8a-0000e663c425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.122.152:46868/i","pattern":"[url:value = 'http://123.14.122.152:46868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c2cbc-317f-87bc-f6d9-000058b014db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/i","pattern":"[url:value = 'http://123.129.130.213:51777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b7db2-b329-a433-0d29-00005484e0e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/i","pattern":"[url:value = 'http://123.13.80.147:46406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288767f1-2e3d-6c87-37c1-00001910b782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/bin.sh","pattern":"[url:value = 'http://115.55.55.83:33095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe32a482-9243-a3bb-b3a8-0000147ba2d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/i","pattern":"[url:value = 'http://222.137.118.107:60191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c211ded0-dbb1-c323-74e6-00000cf4b83f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/i","pattern":"[url:value = 'http://175.165.71.238:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--363f3b01-b0a5-2d00-f22d-00007f60edaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/bin.sh","pattern":"[url:value = 'http://115.50.20.6:57418/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56664bf2-d4c2-6a1d-55d5-0000f56ab0e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.230.104:46320/i","pattern":"[url:value = 'http://123.10.230.104:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--690fe372-2b29-5c55-316d-000046ef4447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/bin.sh","pattern":"[url:value = 'http://115.55.131.216:52075/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d925b8b-bc8c-c71f-7a06-00005e58c735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.216.12:43983/i","pattern":"[url:value = 'http://123.148.216.12:43983/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70da5c47-5dec-3ec5-d274-0000f1abf709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.211.115:43071/i","pattern":"[url:value = 'http://222.142.211.115:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8c4408-fb0a-4e78-906b-00008a7e51b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.139.79:39515/i","pattern":"[url:value = 'http://112.93.139.79:39515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6f9577-5b1b-4701-653a-000074f339b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.173.117:58187/i","pattern":"[url:value = 'http://182.115.173.117:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b759b38-cff5-6f57-b607-00006cd427bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.37:35671/i","pattern":"[url:value = 'http://120.84.214.37:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b42a93d6-89a8-c8ac-790e-0000fca51c97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/bin.sh","pattern":"[url:value = 'http://115.52.234.119:59998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b27a70-57f2-5b32-846d-000050386efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/bin.sh","pattern":"[url:value = 'http://123.129.130.213:51777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cf24f7-f03f-8567-78d5-0000bece1ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.158.185:45619/i","pattern":"[url:value = 'http://175.147.158.185:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff92d2dd-8a39-d640-c548-0000dc28b6c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/bin.sh","pattern":"[url:value = 'http://124.131.164.138:48771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ecd6ae-1eba-5704-4f49-0000594ef9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.217.164:45145/i","pattern":"[url:value = 'http://117.24.217.164:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4ce5e4-3bac-6948-2061-000006fe373e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/i","pattern":"[url:value = 'http://115.209.244.81:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0674594f-5d81-5a58-7040-0000b3a1dc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/i","pattern":"[url:value = 'http://124.131.164.138:48771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcff472a-bb2d-ef01-9c7a-00005396b06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/i","pattern":"[url:value = 'http://119.183.53.105:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e77872-d1a2-887a-2ce1-00007a8b7d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/i","pattern":"[url:value = 'http://113.239.223.235:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb75142-6b5f-84bb-d062-000071cd5687","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/bin.sh","pattern":"[url:value = 'http://113.239.223.235:54830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9efe06-c977-5189-9dfb-00006d734ba7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/i","pattern":"[url:value = 'http://196.189.98.77:39424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efb68f9-1f46-4f30-b46a-0000c928c784","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/bin.sh","pattern":"[url:value = 'http://39.73.44.67:44345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c60ca4-34a2-ba49-2c69-0000f4b5988a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.189.247:57147/i","pattern":"[url:value = 'http://115.55.189.247:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9267163e-8889-0179-b63b-000015cdcc8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/i","pattern":"[url:value = 'http://182.117.68.26:55093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7983b7-e7e8-b325-ec00-00000d10af57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/i","pattern":"[url:value = 'http://219.156.93.123:50459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2024832f-e830-bf45-207a-0000ebca6b0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/bin.sh","pattern":"[url:value = 'http://123.5.124.47:46095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a70a56-cb14-c606-31c9-00002e1ac9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/i","pattern":"[url:value = 'http://27.207.247.91:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cd339f-2b9e-4fa9-6e7e-00001387619c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/i","pattern":"[url:value = 'http://182.120.4.111:56629/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1031a12-adc7-5b03-1252-0000c2f09910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/bin.sh","pattern":"[url:value = 'http://182.121.179.219:53168/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e79d5d2-9df3-cee8-db10-0000afed5cac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/bin.sh","pattern":"[url:value = 'http://27.207.247.91:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13379293-558c-683e-c1e0-0000f0e90e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/bin.sh","pattern":"[url:value = 'http://219.156.93.123:50459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd4eb65-27ed-2303-b3f3-0000865e7074","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.69.71:54203/i","pattern":"[url:value = 'http://105.224.69.71:54203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4c6477-b58d-56b3-5e16-0000db3398cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/i","pattern":"[url:value = 'http://123.5.124.47:46095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eaaf07-8a89-d462-aa68-00009879f86a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.248.132:46446/i","pattern":"[url:value = 'http://175.147.248.132:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7641-f233-330a-09e6-00006d2f1087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.195.40:53219/i","pattern":"[url:value = 'http://112.198.195.40:53219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a987e109-5962-4016-4882-0000cf1eaaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.48.28.98:35726/bin.sh","pattern":"[url:value = 'http://36.48.28.98:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e56d36-a1f8-7088-65dc-0000d4a3dfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/bin.sh","pattern":"[url:value = 'http://182.120.4.111:56629/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4852ce6a-9aeb-d16e-ae6f-0000612ac108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.146.92.46:40975/i","pattern":"[url:value = 'http://117.146.92.46:40975/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b9d3d2-7571-b6ea-97ec-000062d33975","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.30.67:40773/i","pattern":"[url:value = 'http://123.8.30.67:40773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac687dd2-c9b3-18c6-882c-0000a3834a8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/bin.sh","pattern":"[url:value = 'http://115.55.80.26:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5618e4bb-3a32-0f43-dd8b-00001403fab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.121.20:34150/i","pattern":"[url:value = 'http://115.49.121.20:34150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc7f3903-4904-f4d9-003f-0000380e1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.54.168:47860/i","pattern":"[url:value = 'http://182.127.54.168:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7928e-9c38-f88c-3208-00007f73fc18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.171:36842/i","pattern":"[url:value = 'http://219.155.229.171:36842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4518711c-0103-2913-5499-0000c402cf1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.65.125:37575/i","pattern":"[url:value = 'http://115.52.65.125:37575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1329fc56-3aa7-ec59-ecf7-000066fc2162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/bin.sh","pattern":"[url:value = 'http://27.159.154.179:49141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d3377a-704d-adbd-0950-000022cd8b56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.6.71:46382/bin.sh","pattern":"[url:value = 'http://119.184.6.71:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25ce3c0-5aa8-ed5b-3184-000072576edc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/bin.sh","pattern":"[url:value = 'http://219.156.184.4:33396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8933f8a0-b441-2757-5417-00004ebb12e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/i","pattern":"[url:value = 'http://115.55.131.216:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bba139a-e396-5826-a486-00004ea963e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.5.189:45058/i","pattern":"[url:value = 'http://110.136.5.189:45058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a682359-44df-092f-9ef5-00006adbceb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/bin.sh","pattern":"[url:value = 'http://115.53.209.13:43098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74866c31-1a14-7c01-e9d3-00001c4cc8c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.106.241.72:39541/i","pattern":"[url:value = 'http://176.106.241.72:39541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--492ee127-8d69-41ce-e1c4-000052c7dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/bin.sh","pattern":"[url:value = 'http://123.129.2.24:55703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb5ee0c-e8fe-6f6d-d7fa-0000869a2565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/bin.sh","pattern":"[url:value = 'http://123.11.11.28:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c0d69c-5af6-43e7-6c10-00004c79a4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.234.38:33146/i","pattern":"[url:value = 'http://182.113.234.38:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b8a8add-f3bb-80f7-2da5-0000bd26f969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.5:34195/i","pattern":"[url:value = 'http://112.198.193.5:34195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf491ad-966b-2a96-a41b-0000f75c069f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.123.46:35446/i","pattern":"[url:value = 'http://27.215.123.46:35446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbabbf8-72d0-d309-0213-000063244aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/i","pattern":"[url:value = 'http://115.55.55.83:33095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d22fd-0836-4457-e36b-000090699f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.198.107:45304/i","pattern":"[url:value = 'http://115.55.198.107:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dc52e5-e342-9d45-c680-00005cb7f695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/bin.sh","pattern":"[url:value = 'http://115.209.244.81:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc4a3e9-5518-b566-2ee7-00004b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.241.88:59418/i","pattern":"[url:value = 'http://115.52.241.88:59418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825402a8-90a5-015b-b15c-00007d2dbe9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.104.54:56510/i","pattern":"[url:value = 'http://112.248.104.54:56510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68eb0bb6-7c4d-010f-8891-0000e189255f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.224.99:37425/i","pattern":"[url:value = 'http://125.43.224.99:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35c0028-e544-daca-07cc-0000a0f54f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.227.39:56994/bin.sh","pattern":"[url:value = 'http://115.55.227.39:56994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3abc6a7d-011b-129d-1cb5-0000f59ac21d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/bin.sh","pattern":"[url:value = 'http://123.13.80.147:46406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48f842a2-9a34-cfca-bff2-00005fa39b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/bin.sh","pattern":"[url:value = 'http://210.208.111.220:36372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a66b861-9d21-3e12-c842-000035ae047e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/bin.sh","pattern":"[url:value = 'http://112.239.113.122:44773/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc95c9e4-fe36-a48b-5c79-0000c0c036c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/bin.sh","pattern":"[url:value = 'http://113.230.81.126:50462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0791e46f-2bb4-5560-5dfa-00000ae75c8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/bin.sh","pattern":"[url:value = 'http://123.14.88.114:47055/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78523110-dd6e-f7b7-a107-0000ab68d1cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/i","pattern":"[url:value = 'http://115.50.20.6:57418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bc382b-53fa-c216-516f-00001526afa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/Mozi.m","pattern":"[url:value = 'http://37.78.176.5:45921/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e77548-61f0-956c-8bf9-0000e6d9638b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/i","pattern":"[url:value = 'http://115.55.80.26:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c383941b-d9e4-e599-9fe2-000085999478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/bin.sh","pattern":"[url:value = 'http://113.231.9.63:39328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6361d3-decb-ad6d-619c-0000d3e4a459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/i","pattern":"[url:value = 'http://112.239.113.122:44773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3e76e0-55d1-e46a-240c-0000e59056d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/bin.sh","pattern":"[url:value = 'http://123.13.30.198:35585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e4d2ce-d233-4476-6f99-00007b2e7f51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.12.14:38104/i","pattern":"[url:value = 'http://221.15.12.14:38104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a903a4e-0fa8-eae1-4e84-00005bd4a873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.67.89:44844/i","pattern":"[url:value = 'http://182.115.67.89:44844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c788283-d09f-587e-1b00-0000406ee3dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/i","pattern":"[url:value = 'http://115.52.234.119:59998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b073c176-2994-e0d1-18e4-0000bfe79775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/bin.sh","pattern":"[url:value = 'http://222.137.158.38:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3269aa0a-0f93-5b72-641e-000099674dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/bin.sh","pattern":"[url:value = 'http://222.137.118.107:60191/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80419a25-9039-4d38-2698-00004085d2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/i","pattern":"[url:value = 'http://123.14.88.114:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edccb81f-25f9-3f0e-bcff-00005dc20b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/bin.sh","pattern":"[url:value = 'http://119.183.53.105:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88743f2d-fa3c-7582-826b-0000cb550f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/bin.sh","pattern":"[url:value = 'http://42.224.70.213:38527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ea64fa-de0e-22f6-c882-00000d6b1618","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/bin.sh","pattern":"[url:value = 'http://42.224.99.104:58376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31a01fe-ee7f-7e1b-e9f4-0000af55d3bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/bin.sh","pattern":"[url:value = 'http://182.117.68.26:55093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6264dd02-220b-b241-41f3-000089bb8fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/i","pattern":"[url:value = 'http://115.51.196.94:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd739f83-7be2-f4cb-2aa3-000028d05699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.187:43642/i","pattern":"[url:value = 'http://42.230.157.187:43642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32545db-97ca-d051-61b4-0000b3a0f0bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/bin.sh","pattern":"[url:value = 'http://115.57.44.181:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9043af08-98a5-a978-3566-00003c2fa48a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/i","pattern":"[url:value = 'http://222.137.158.38:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa181ca0-8a57-dd11-6d2c-0000d815dd3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/i","pattern":"[url:value = 'http://182.116.10.124:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c8af6b-efa2-15e7-1418-00000cd48bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.130.28:46269/i","pattern":"[url:value = 'http://196.189.130.28:46269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b59c9c6-7e46-d022-eb9c-000069db2a60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/i","pattern":"[url:value = 'http://116.138.249.233:41996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc0f71f-d641-30d6-55f9-000023951414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/bin.sh","pattern":"[url:value = 'http://175.165.71.238:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--207d629a-1202-27a4-426c-00007d8d7c0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/bin.sh","pattern":"[url:value = 'http://115.51.196.94:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1ec47c-2d9f-a2da-df7a-0000fc04fb48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.102.135:34775/i","pattern":"[url:value = 'http://222.138.102.135:34775/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb6076a-4bcc-b851-60ba-0000dc758ba9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.117.178:50959/i","pattern":"[url:value = 'http://105.224.117.178:50959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d907592d-5747-250d-4db8-000031fee37a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.202.24.36:37993/i","pattern":"[url:value = 'http://27.202.24.36:37993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0018b629-6115-78f7-01ef-00006219a9a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/bin.sh","pattern":"[url:value = 'http://182.116.10.124:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e2e0d-bc72-3632-72c4-00007b7aa37d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/i","pattern":"[url:value = 'http://42.224.99.104:58376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7054af-92f6-bfd8-5d91-0000a880b6d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.41.107:34572/i","pattern":"[url:value = 'http://125.43.41.107:34572/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba95a5e-2b45-16c0-6d37-00007d0ae8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.216.30:39421/i","pattern":"[url:value = 'http://125.47.216.30:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ec352c-238f-a878-64eb-0000ceac966f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/bin.sh","pattern":"[url:value = 'http://196.189.98.77:39424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc35129-7e8b-78c8-a25b-00006227c7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/i","pattern":"[url:value = 'http://27.159.154.179:49141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49843208-43dd-18f4-2e6c-0000fdc00717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.0:36944/i","pattern":"[url:value = 'http://110.36.86.0:36944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aca68e2-30d6-8d19-c4e5-000088858b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.201.196:57604/i","pattern":"[url:value = 'http://110.38.201.196:57604/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b6d28d-1f84-74dc-e5e4-00008c977cd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/i","pattern":"[url:value = 'http://61.137.193.167:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bae7dc0-e441-bf54-2779-0000ce265a21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/bin.sh","pattern":"[url:value = 'http://83.228.109.209:51502/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e720ba54-b0cf-b95c-2313-0000ba87a5df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/bin.sh","pattern":"[url:value = 'http://78.60.75.209:50077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c688e0-f317-fe07-694c-0000dcc9e019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/i","pattern":"[url:value = 'http://83.228.109.209:51502/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944454b3-753b-eafb-f902-00009c0818aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/i","pattern":"[url:value = 'http://78.60.75.209:50077/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c90e84b-c618-77dd-6ff9-0000ee11cd23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.152.192:37513/i","pattern":"[url:value = 'http://61.53.152.192:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992d34a7-dcf7-af2c-bfb3-0000d6b4a150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/i","pattern":"[url:value = 'http://42.233.91.100:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5beb32-405e-784d-4210-000092aad6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/bin.sh","pattern":"[url:value = 'http://42.233.104.208:40542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef4c9c8-7429-f5ee-7e3c-0000cb22d81a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.83.85:60110/i","pattern":"[url:value = 'http://42.237.83.85:60110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e2fde8-728b-dd08-27be-0000bc91d8e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.233.154:43712/i","pattern":"[url:value = 'http://60.23.233.154:43712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--980a0c38-d035-0511-8f6f-0000926e570c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.29:40746/i","pattern":"[url:value = 'http://59.58.42.29:40746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb35e500-a212-052e-675b-000081cc86df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.114.165:55640/i","pattern":"[url:value = 'http://61.52.114.165:55640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf05026-3802-bb34-fc3b-0000cfb0d069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.202.82.19:60523/i","pattern":"[url:value = 'http://87.202.82.19:60523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522aacb3-9134-9b89-7101-0000ea673f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/bin.sh","pattern":"[url:value = 'http://42.57.201.222:50295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702ffbd0-3258-65d4-d85a-0000256675c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/i","pattern":"[url:value = 'http://42.57.201.222:50295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--593e637b-342d-5d48-b66b-00002363e789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/i","pattern":"[url:value = 'http://42.59.226.215:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748b9dd3-1f08-7257-be92-0000c53c604c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/bin.sh","pattern":"[url:value = 'http://42.59.226.215:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab009f55-2e47-8e86-ecfc-000068d83f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/i","pattern":"[url:value = 'http://123.11.11.28:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35047732-e1cc-0e01-41ab-0000b48a5f4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/bin.sh","pattern":"[url:value = 'http://61.53.72.56:41711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bec07e-48b4-fd45-5cab-00004d3a4949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/bin.sh","pattern":"[url:value = 'http://42.231.67.26:56479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02202e01-9158-5630-4e0c-0000c5dd067f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://82.114.181.233:33360/i","pattern":"[url:value = 'http://82.114.181.233:33360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d72b2c8-ead6-8ec5-8f53-000003325ee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/i","pattern":"[url:value = 'http://42.58.118.214:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e14e18d-6502-a6dd-2965-00004024dbe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/bin.sh","pattern":"[url:value = 'http://42.235.43.180:36905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f5b951-4cc2-bc0b-fcd4-000061d81272","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/i","pattern":"[url:value = 'http://42.235.43.180:36905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433827fe-8802-c1bb-ffdf-0000b9eb11cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/i","pattern":"[url:value = 'http://42.233.104.208:40542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcef2f7-b78f-6a6f-7516-00001eab4cc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/bin.sh","pattern":"[url:value = 'http://42.233.91.100:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--127a2389-a1e8-68b0-a636-000014eb8af0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.162.218.63:58599/bin.sh","pattern":"[url:value = 'http://60.162.218.63:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9b0f17-fbdb-a55e-ea63-00000d5aa6d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/i","pattern":"[url:value = 'http://61.53.72.56:41711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2efde2f-fbb9-c7a8-e6b8-0000e86953f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.168.22:33430/i","pattern":"[url:value = 'http://42.238.168.22:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b524d0a8-89f2-41e0-8888-00009e26680d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/i","pattern":"[url:value = 'http://117.211.213.219:35115/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5663e368-12cc-38fb-4f84-0000135a4fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/bin.sh","pattern":"[url:value = 'http://117.211.213.219:35115/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f855e7aa-d203-d3b1-82a6-00002aa75db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.101.221:42822/i","pattern":"[url:value = 'http://27.37.101.221:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5906984f-c1a2-81ea-c9a8-0000df4b2a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.225.130:45357/i","pattern":"[url:value = 'http://221.1.225.130:45357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3257bf6-a8e5-4fb0-3b78-0000c2f03e45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.226.6.169:40695/i","pattern":"[url:value = 'http://105.226.6.169:40695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbd06d0-d9a1-0ec2-43d2-00009a7518e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/bin.sh","pattern":"[url:value = 'http://175.165.110.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c240de9c-a6d5-f776-8557-00006918adf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/i","pattern":"[url:value = 'http://175.165.110.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33cf168f-7524-cf6a-cd20-0000095c73d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aktcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aktcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61376b3e-0adf-a47d-e0fc-0000e4379a36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/UDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/UDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e95818b-95df-ffb8-052b-0000bbeb7f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EEcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EEcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f51c5d1-ae73-14ad-af81-0000d2dc58ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uzcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uzcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce6e81f-f7d3-af4a-6eb6-00003cc29fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a047008-97e9-e223-89ca-0000d237a9c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd08581-88f2-7d74-2966-0000d4a68a8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b29c10-1be2-dd90-0171-000010cbf10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/syst3md","pattern":"[url:value = 'http://ten.devurek.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d7c219-1050-f7af-6e09-000006fa2f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cli","pattern":"[url:value = 'http://ten.devurek.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b5ecad-04d3-5bfb-9d28-00006c1670f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/proot","pattern":"[url:value = 'http://ten.devurek.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b62e5f2-1dd3-3d5c-d6dd-0000c283e5d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401efbe0-5461-2545-9334-000050d3905b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/log","pattern":"[url:value = 'http://ten.devurek.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c58d8426-5ef8-d55b-8eb6-00000450ddeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0351d79f-b8db-e1b9-dc93-0000d02c88da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/oldboss","pattern":"[url:value = 'http://ten.devurek.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753593ee-29e8-8eed-ce8a-00005bd5a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/boss","pattern":"[url:value = 'http://ten.devurek.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42eee5be-a644-cd64-748f-00005f0d5e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f696aaf1-8f69-1b3b-1b37-00000df43ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cliaarch","pattern":"[url:value = 'http://ten.devurek.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8f0c5e-f69b-d156-0dd6-000043e697e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e338b0-1372-c87d-a7ca-00001fb4b473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/main","pattern":"[url:value = 'http://ten.devurek.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce59a700-5266-fe76-1dc2-00000787861e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b80426-5d69-7674-179d-000069608187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/wd1337","pattern":"[url:value = 'http://ten.devurek.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7228ea-c901-8727-40fa-0000b355aed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d81ae7d-6dcb-29e2-4337-000002649c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3411a87-fd6b-e8f1-e9db-0000a1fac3d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/Error84","pattern":"[url:value = 'http://ten.devurek.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8819bc78-e5ba-93ec-4437-0000828f35ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f3dd78-605a-4d8c-d530-0000beb66431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mnurlogistics.az/ind8inc/crypted.ps1","pattern":"[url:value = 'https://mnurlogistics.az/ind8inc/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1170746b-8d15-6a84-190b-0000aba2acb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/#","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/#']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35bb3375-e707-7830-0483-00000e94e014","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://malaysianpastrybakery.org/crypted1.ps1","pattern":"[url:value = 'https://malaysianpastrybakery.org/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a07d28-6118-5883-13e7-00008e6ff641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/oldboss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1759ec-c1b1-d681-15c6-0000bc240f3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/boss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb79bed-6458-bc82-b294-000092fc7388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.57.200:55698/i","pattern":"[url:value = 'http://123.8.57.200:55698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3747d74-3da2-764c-8679-00006a77371f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64675331-338c-d42a-eeaf-0000939f3001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin44.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbf1be-588e-d4cd-cb07-00006aa22cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/TELEG.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/TELEG.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e4b240-0170-4166-b16f-0000f57822cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/Forbes.exe","pattern":"[url:value = 'https://rcf.co.mz/Forbes.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d04367a-2fb7-d986-fe95-00002361fd19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbbea79-93ce-fd72-8427-0000577467cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/am11binupload.txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/am11binupload.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824336a7-75b4-d97e-bae1-00004e888f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/syst3md","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc1f2b2-1188-53ac-2a7b-0000f8451ec4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/main","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc2af85-f9f6-ce70-bae2-00004f7d9f63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cli","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b0b030-41b3-0c08-dabc-0000ffb9bd4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/Error84","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070d561a-30d7-b6bc-5729-00007797e560","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96322f72-655a-8a47-f5f1-000079c890eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6742af4b-34d3-1241-743e-000039f4a772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/proot","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0b967c-4d2e-6a5e-610c-000019542055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/log","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45cd1ef1-23f0-be5e-6069-000071e4ddde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883fb428-989d-7be0-d142-0000f4e714ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/wd1337","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2552e219-17cd-36ac-e707-00000eac7cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/google.exe","pattern":"[url:value = 'https://rcf.co.mz/google.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edcb75f-0d87-ada1-5cbd-0000b7778afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/img_065018.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/img_065018.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79e3efa-6e35-ec38-262e-00001a571661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c421e16c-7891-5803-ea8b-0000beb7a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f26619-9010-b042-a798-000087958288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://medicosantiagomarrero.com/services/img.png","pattern":"[url:value = 'https://medicosantiagomarrero.com/services/img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f886112c-f8ab-2668-c1d8-00009223ffd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.79/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe8dd62-af8a-69d4-68f9-000025628b23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/flyudfg.png","pattern":"[url:value = 'http://192.109.139.79/flyudfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c7535a-feb8-c5cb-8489-000001cbb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.9.35.137:54934/i","pattern":"[url:value = 'http://95.9.35.137:54934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9efbe3-fee3-2ced-6ec6-0000bf2dade9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/3xmytp.sh","pattern":"[url:value = 'http://31.76.29.161/3xmytp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f453511-0bf6-6e61-df23-00004d15fb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/bin.sh","pattern":"[url:value = 'http://203.2.151.15:43360/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec627c6d-bc62-8209-d3d3-0000944f2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/i","pattern":"[url:value = 'http://203.2.151.15:43360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7e7d7b-2451-4d78-bb37-000081fe99d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png","pattern":"[url:value = 'https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dafa7d1-9ce0-ecba-57aa-0000df128ec3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58039e4-51b5-7f7d-94d0-0000b9a133bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83da76a2-767d-f3c5-e115-000031e92999","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--654f7448-c761-f283-7765-000027cf7940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.x86","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c89685e-1b10-ca5c-41d7-0000ab149c53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff64274-a29e-650c-d05a-0000311fff43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48fd4586-1384-65a3-4aca-00005fcc1735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b8e58c8-d9a3-aca1-9311-000013a8fb36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82870972-d7ef-a841-4f5c-0000011d54d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2484bd-b178-06bc-8f6b-00005a1c9109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccd9887-9ebd-1895-1235-00004c41f6f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.189.81:42693/i","pattern":"[url:value = 'http://123.14.189.81:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb4e995-7f1f-f2f3-f095-00004c1e000e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.stratagemzw.com/MSI_PRO.png","pattern":"[url:value = 'https://www.stratagemzw.com/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d434940-f2d4-3218-d86d-00004a822c05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014220.png","pattern":"[url:value = 'https://stratagemzw.com/img_014220.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096254c2-5a9b-da63-e9f3-00001b369fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff414429-0d85-017d-6814-00005624c339","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://dasberlinerhotel.com/wp-content/uploads/update.exe","pattern":"[url:value = 'https://dasberlinerhotel.com/wp-content/uploads/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--892285fa-6cd9-a6a3-de35-0000dfb19ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014740.png","pattern":"[url:value = 'https://stratagemzw.com/img_014740.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e526f20d-a7f7-2a82-657f-00000829d0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/40/JSload.hta","pattern":"[url:value = 'http://209.54.103.153/40/JSload.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a013820-c267-8085-a538-0000aca38f79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js","pattern":"[url:value = 'http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c500a6f1-8508-98cc-db5a-0000b82d47e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7acf5e-db27-7c49-3416-00006ee615ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/bin.sh","pattern":"[url:value = 'http://138.204.196.136:51078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909403ff-ba07-7a76-bace-000096a1754d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93552bb0-850a-ae6f-dfbb-00005c59e33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78487ea4-0262-3b37-60de-0000e3bc2db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.x86_64","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--affc214d-2078-0452-5984-0000b4a0f046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mips","pattern":"[url:value = 'http://2.26.48.37/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7968af85-e9f6-c56f-b7d2-0000797ed5f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i686","pattern":"[url:value = 'http://2.26.48.37/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d0159b-477c-1b6f-4767-0000b456269c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.m68k","pattern":"[url:value = 'http://2.26.48.37/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04645390-8dbd-1ac8-0cf1-0000d22c568c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.powerpc","pattern":"[url:value = 'http://2.26.48.37/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87424b4e-982f-2030-1676-0000052d5391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.sh4","pattern":"[url:value = 'http://2.26.48.37/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a185891-76c8-746c-9e70-000069a9d809","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv5l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--730369d0-d2f8-d9bf-9976-000054c9f1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv4l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41350b52-6d04-75a5-0bed-00002e09a2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv6l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2e11dc-af69-5943-e280-0000ffeaa75e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i586","pattern":"[url:value = 'http://2.26.48.37/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582e3a13-4536-b64c-dc21-000013698b69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv7l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e92e84-74c1-b380-071e-0000c09ba516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mipsel","pattern":"[url:value = 'http://2.26.48.37/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4ebb05-8b40-10c6-a7c7-000064e89c0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7d6303-892e-e7f7-2c86-00009654ce7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.138.135:48639/i","pattern":"[url:value = 'http://115.203.138.135:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06e754a-f772-14cb-b353-000071398ca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27eb7b2-69c7-a1e5-aeb9-00002e950b26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99412f8d-7c9b-e825-784c-00000e5c848f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta","pattern":"[url:value = 'https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--565af734-906c-07ae-46e5-00000757c724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98aa1923-fe90-14a8-69c4-0000637e5e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156d4097-e5c6-b455-4116-0000cf50b92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suppliers.lovestoblog.com/img_005219.png","pattern":"[url:value = 'https://suppliers.lovestoblog.com/img_005219.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45688246-2872-4d6a-36a9-0000cabda73a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://totalfitting.com.au/super%20agent.exe","pattern":"[url:value = 'https://totalfitting.com.au/super%20agent.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dac6eae-83a5-78a1-71c8-0000038e9c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://midle-eastcompany.com/HypEEAugustBless2026.exe","pattern":"[url:value = 'https://midle-eastcompany.com/HypEEAugustBless2026.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46c383b-e7d5-8b8c-21a4-00008fd3deb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://aeplled.cfd/stego/stego_7mpp3kpd10.png","pattern":"[url:value = 'https://aeplled.cfd/stego/stego_7mpp3kpd10.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d14ca21-2b64-6630-1371-0000e636829d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/praise/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/praise/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b04b7d-4355-5d76-79d9-000070b39b0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:58578/i","pattern":"[url:value = 'http://110.38.210.180:58578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704130ae-5768-e0b8-445f-0000f90d7241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5917492177/O0KqSEz.exe","pattern":"[url:value = 'http://62.60.226.140/files/5917492177/O0KqSEz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66b656c-33a2-e293-8241-00007751501e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/bin.sh","pattern":"[url:value = 'http://112.248.186.110:34455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d08f45-56e0-70bd-66e9-0000b8ef5c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/i","pattern":"[url:value = 'http://112.248.186.110:34455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351e9264-29f0-38b4-48eb-000002d0f39c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de1b8b91-bb49-dcb4-e0d8-00005ab51fdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b9e45-35f8-5f92-46ac-0000e780646f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b2c65b-ad7f-d62e-099f-00002c5026e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b511f344-0688-18df-5441-0000d6c4f28b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f911e690-25cb-1c71-908b-00006bf1893f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7cb0d7-548f-8715-188d-0000c1c6f50f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77ca503-ea18-652e-e418-00007cf38ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5f2d02-f4f7-ea94-b96e-00002c0c8775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db2d38f-8ac8-15ed-9954-000091655d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e9adf7-d74c-8c85-e509-00008682b863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c76ddd6-b7df-3970-caf8-0000f08263eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace9b823-60a0-0149-c0e1-00003bb7c3d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e99ee2-7a89-674b-f02b-00006804bcb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/bin/support.client.exe","pattern":"[url:value = 'https://45.83.31.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e58a57-1ba6-0a8e-4d56-00008c891b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e93ff5-33e4-9c14-d058-0000c6718412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/bin/support.client.exe","pattern":"[url:value = 'https://124.198.131.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f93c16-9d79-ce7a-35cc-00005b4fa90b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f2755f-93eb-7e26-6711-0000926d3203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://209.141.51.224/dns","pattern":"[url:value = 'http://209.141.51.224/dns']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae50968-11e3-5c49-1d4c-0000b31072c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.53.139/linpeas.sh","pattern":"[url:value = 'http://209.141.53.139/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52b9a33-bd28-67c3-207e-0000f5498562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.76.206.4/123","pattern":"[url:value = 'http://38.76.206.4/123']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8653581-1d00-fc72-afd1-00008b6863b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/lterouter","pattern":"[url:value = 'http://160.119.71.134/n2/lterouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513b11dd-915b-f493-fa54-000093f529a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mpsl","pattern":"[url:value = 'http://160.119.71.134/n2/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e9d714-57c7-4149-e99e-0000f8f647e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mips","pattern":"[url:value = 'http://160.119.71.134/n2/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977d839a-a730-5f77-d3a0-00003ae8be16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/g","pattern":"[url:value = 'http://144.31.147.198/g']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dabb9d6-b753-5a95-743d-0000097163a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tr","pattern":"[url:value = 'http://144.31.147.198/tr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c4f2d2-a038-ce48-5fb9-0000c0f82102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/u","pattern":"[url:value = 'http://144.31.147.198/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a571e2-c524-4b21-1dab-0000ce885ed8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/mp","pattern":"[url:value = 'http://144.31.147.198/mp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a86a84-ad26-06cb-162f-000055555e72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/m","pattern":"[url:value = 'http://144.31.147.198/m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b43c8d2-fe93-8007-04d2-0000968de997","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/gs","pattern":"[url:value = 'http://144.31.147.198/gs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a5d8fa-6f38-fe82-cb80-0000a378ab2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tp","pattern":"[url:value = 'http://144.31.147.198/tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ccff27-4398-6f00-240a-0000c88266cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/j","pattern":"[url:value = 'http://144.31.147.198/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c5ae9d-1ea6-4bb1-4add-0000da37c925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/i","pattern":"[url:value = 'http://144.31.147.198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da757e7-e035-1fdd-33cd-0000e5937ede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/s","pattern":"[url:value = 'http://144.31.147.198/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae065d-aac2-8c10-5dcd-0000f726d130","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/p","pattern":"[url:value = 'http://144.31.147.198/p']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17211ce7-5fd6-a60b-5bc7-0000f2c5ce9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://144.31.167.1/bin/support.client.exe","pattern":"[url:value = 'https://144.31.167.1/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e332b73c-7044-7358-b38b-0000ba543046","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/ppc","pattern":"[url:value = 'http://160.119.71.134/n2/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab92b35-b114-3d25-7bee-0000121b947e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sparc","pattern":"[url:value = 'http://160.119.71.134/n2/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c5e3c2-d302-ff62-dc01-0000f8009138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/m68k","pattern":"[url:value = 'http://160.119.71.134/n2/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6789c032-de21-b9df-e6a6-00008c0798fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv7l","pattern":"[url:value = 'http://160.119.71.134/n2/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e92f173-2a00-7b47-22dd-0000b167b14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv6l","pattern":"[url:value = 'http://160.119.71.134/n2/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55bfa2b0-9c96-0705-e806-0000f6c7cb9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv5l","pattern":"[url:value = 'http://160.119.71.134/n2/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca493f1-7583-65c9-e893-0000cba7e22d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv4l","pattern":"[url:value = 'http://160.119.71.134/n2/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8086f2-35db-dd23-d21b-0000c2575e33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86","pattern":"[url:value = 'http://160.119.71.134/n2/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9660556b-0b0e-3ee6-8599-00003a8aa9b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sh4","pattern":"[url:value = 'http://160.119.71.134/n2/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c87c8e0-0fca-5de3-1a9b-00002d6bded7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/aarch64","pattern":"[url:value = 'http://160.119.71.134/n2/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0628cec2-2dd8-e8d8-3c2d-0000069155bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86_64","pattern":"[url:value = 'http://160.119.71.134/n2/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336f110f-8820-f522-3f74-000071fe5d79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.138.178:42032/i","pattern":"[url:value = 'http://112.198.138.178:42032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9214e701-e202-5f04-45cb-0000fe519e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/tbk","pattern":"[url:value = 'http://160.119.71.134/n2/tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ad9f5f-2eab-3439-a562-0000cd2865d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/bin.sh","pattern":"[url:value = 'http://196.189.197.131:44348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197733b-bc69-239d-7b90-0000b63163ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/i","pattern":"[url:value = 'http://196.189.197.131:44348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9701fe3e-85e6-3703-cf92-000027bb7106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172-104-49-49.ip.linodeusercontent.com/bot.mips","pattern":"[url:value = 'http://172-104-49-49.ip.linodeusercontent.com/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11da1c4-bc46-96c6-9f60-0000b6ca9ae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mips","pattern":"[url:value = 'http://172.104.49.49/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54016f-6e75-ecee-a6e0-0000c2e06d12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mpsl","pattern":"[url:value = 'http://154.90.70.23/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd4af046-30e4-a6ea-203f-000002d4fd52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.sh4","pattern":"[url:value = 'http://172.104.49.49/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8181211-8f0a-ae36-847a-0000820a64a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.ppc","pattern":"[url:value = 'http://172.104.49.49/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--007294d3-77e3-6637-58ac-0000d09f91c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm","pattern":"[url:value = 'http://172.104.49.49/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bb15e0-c393-bd36-eda8-00003692194c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.aarch64","pattern":"[url:value = 'http://172.104.49.49/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7565bb78-47cb-f464-16ab-0000947d9e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm7","pattern":"[url:value = 'http://172.104.49.49/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13108047-a885-5e55-c2e3-0000a79756d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mipsel","pattern":"[url:value = 'http://172.104.49.49/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e769a20-45be-d961-42b3-0000fef3b5e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.x86_64","pattern":"[url:value = 'http://172.104.49.49/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc513908-2de3-51aa-71a4-0000e88df872","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tarkioweb.com/crypted.exe","pattern":"[url:value = 'https://tarkioweb.com/crypted.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fd00ac-a8ef-5945-377d-0000e7186f1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/i","pattern":"[url:value = 'http://27.207.229.26:38938/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f5b246-36e3-478f-f79f-00009b457e75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/i","pattern":"[url:value = 'http://182.127.69.34:57222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0efd658-278a-0999-2e83-0000710ea716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/i","pattern":"[url:value = 'http://39.73.172.141:48914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ac7794-420f-d79b-60aa-0000b17255e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:46269/bin.sh","pattern":"[url:value = 'http://196.189.130.28:46269/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88005e5e-dad2-d407-52cb-0000b66c3646","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/bin.sh","pattern":"[url:value = 'http://117.223.141.118:49088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ba8022-aff0-6dc8-cc1e-0000df881569","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mips","pattern":"[url:value = 'http://150.241.65.212:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8866d3-c52c-4192-2ff5-0000ab7d09a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x64","pattern":"[url:value = 'http://150.241.65.212:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6192b93-f2d6-00a2-253c-000019381678","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/dp.sh","pattern":"[url:value = 'http://150.241.65.212:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcbcb24-5f55-0cbf-8b1a-0000ef8abef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm4","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e1039c-df3b-bd06-a194-0000fc5f8564","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc440","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3466c83-125b-600c-c7ce-000041f220aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i686","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fed69d-ac49-3c96-f016-00008cdad3c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.m68k","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40deb026-64c4-4399-61b2-00004d182ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mipsel","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69ff077-b7a6-98eb-7d4c-0000d1c454c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118c5c65-c6b2-f690-0165-0000486a9127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sparc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3cd1220-b01f-7aa6-e9b7-0000511acd33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sh4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6adc861-df23-2202-f725-00001627660c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm6","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a3a94d-4012-f30f-edbe-0000bc2eae87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6462466e-b186-87b0-7494-0000b3a04b17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc440","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c2b8ed-61fb-3711-7d11-00000c3a81a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i486","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa499db-c66f-d186-8b44-00000492c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm5","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1aaf8f7-0e3c-f65c-a054-0000ae9b0169","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm7","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba08d1b-1181-28e4-b332-0000bcfe4c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x64","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575df5d4-17ba-c1ed-858e-000002e7e0a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mipsel","pattern":"[url:value = 'http://150.241.65.212:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc96b4f4-52d6-8a8d-c07b-0000df7ec3b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.m68k","pattern":"[url:value = 'http://150.241.65.212:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c5aa08-0cb2-5dd6-8a5b-000045837679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm6","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2577edfb-de2d-eb5f-2a4b-00006856b084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sparc","pattern":"[url:value = 'http://150.241.65.212:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b71bbf-c13f-41d8-63e9-0000c6471137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c052a71-b8e8-4fc4-972e-0000be447f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x86","pattern":"[url:value = 'http://150.241.65.212:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45aada84-e497-7f83-2e8b-00005f9e91d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i486","pattern":"[url:value = 'http://150.241.65.212:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaccfbb2-e983-1ace-449e-00005736d997","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm5","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462e0eea-2261-764b-b9a4-0000125630df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i686","pattern":"[url:value = 'http://150.241.65.212:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2dc1b9-8ea1-5769-0f6a-0000a9c73ab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x86","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5f9e8-9a45-c4a0-7f7a-0000469988c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sh4","pattern":"[url:value = 'http://150.241.65.212:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c29a9e-9ea4-d129-6944-0000fd3f111c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm7","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d2e24b-9dfe-bad9-e41a-00008c2c051c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mips","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8c5a18-c2ac-97df-1534-00004219cd9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/bin.sh","pattern":"[url:value = 'http://125.43.228.137:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a50558c-1694-e150-f435-0000b0fe5fa5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/i","pattern":"[url:value = 'http://117.223.141.118:49088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa4172e9-4f4f-9fab-b18f-00004e97c459","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.231.237:58779/bin.sh","pattern":"[url:value = 'http://42.225.231.237:58779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62cdaeb-a09d-0199-1dbc-000018ce3b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/i","pattern":"[url:value = 'http://125.43.228.137:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb28ea-c39b-dff1-eec0-00002731954e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/bin.sh","pattern":"[url:value = 'http://103.172.186.158:49566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f62e1c-a799-16bf-84bb-0000be934198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/bin.sh","pattern":"[url:value = 'http://115.51.111.87:51413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6482efe-d002-0cff-5f5e-0000382cdb0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.152:59339/bin.sh","pattern":"[url:value = 'http://59.96.140.152:59339/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e925d819-5110-dbe8-cac4-0000e56446e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/i","pattern":"[url:value = 'http://182.116.113.190:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5d9fdf-8bb1-3be9-58b5-000091a08ca4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/i","pattern":"[url:value = 'http://218.0.112.226:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3426db-7ac9-ad98-372d-000097c0e8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/i","pattern":"[url:value = 'http://116.76.206.254:50342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b347fbbc-c148-8f2a-dc56-000027c2ae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/i","pattern":"[url:value = 'http://103.172.186.158:49566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5897b608-da83-aaef-cdda-000026911b97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/bin.sh","pattern":"[url:value = 'http://175.165.6.177:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1afd238e-5f31-d477-90f0-000062788afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/i","pattern":"[url:value = 'http://115.51.111.87:51413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d61598d7-1a97-3b17-4a28-0000a8f58234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/bin.sh","pattern":"[url:value = 'http://123.12.165.138:33116/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec85a1e-7a09-ae12-aa21-000037253496","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.104.54:56510/bin.sh","pattern":"[url:value = 'http://112.248.104.54:56510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1a46-74d3-cddb-0cff-000027fbf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/i","pattern":"[url:value = 'http://202.1.26.69:42948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--560da8b7-2bec-5875-ea44-00002c08e731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/i","pattern":"[url:value = 'http://175.165.6.177:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3a0b24-e5cc-061b-8d86-0000eecaab15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/i","pattern":"[url:value = 'http://123.12.165.138:33116/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57024aa2-94c6-fb8d-9a11-0000ca120a54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.232.182:58614/bin.sh","pattern":"[url:value = 'http://182.119.232.182:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9109e95-9230-9acb-8614-0000fddb88ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.136.25:46193/i","pattern":"[url:value = 'http://39.79.136.25:46193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86505e2a-5148-816f-46b6-00008effa730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.40.8:41660/i","pattern":"[url:value = 'http://61.54.40.8:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec1cd2f-5cb0-6f66-ba85-000055501fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/bin.sh","pattern":"[url:value = 'http://218.0.112.226:51471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bc924c-d66d-54c9-c40f-00000c56269c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/bin.sh","pattern":"[url:value = 'http://182.116.113.190:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f682c7f-5826-5a6e-71a9-0000d183e838","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/bin.sh","pattern":"[url:value = 'http://110.186.231.112:53078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4308f7-ba19-cc27-249b-000063f1ba37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.199.15:38549/i","pattern":"[url:value = 'http://182.119.199.15:38549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98db0edd-d0b3-2ab5-918b-0000fea5c587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/i","pattern":"[url:value = 'http://110.186.231.112:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d03c045-644d-13ff-8798-0000d0d48c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.101.70:58354/i","pattern":"[url:value = 'http://115.51.101.70:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48b3562-94f8-520b-91c3-0000677ec24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/bin.sh","pattern":"[url:value = 'http://123.5.191.195:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86a09f8-1ed2-7d17-b341-000033045471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/bin.sh","pattern":"[url:value = 'http://175.174.107.238:46076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830d9573-b85b-882f-18ed-0000d04691c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/bin.sh","pattern":"[url:value = 'http://105.184.167.215:38779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2158ab-ccd1-d45b-3569-00001f5030a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.30:39103/i","pattern":"[url:value = 'http://182.118.241.30:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66069ec-7be2-c4d4-c53e-0000ad03dd1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/bin.sh","pattern":"[url:value = 'http://196.188.75.58:48074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a1de20-2f4b-63d2-a254-000072517805","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/i","pattern":"[url:value = 'http://105.184.167.215:38779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01c58c85-e206-0ce1-4288-00006fb07dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/i","pattern":"[url:value = 'http://196.188.75.58:48074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3e42b7-1b0c-a3e6-1cbf-000037499d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/i","pattern":"[url:value = 'http://123.5.191.195:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17f1d4-bbef-18b3-0839-0000f0828d83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/i","pattern":"[url:value = 'http://123.11.64.213:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcaeeae2-74da-a0a5-58ba-0000cbefd455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.239:54755/i","pattern":"[url:value = 'http://175.148.156.239:54755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6d24c-9b1d-712d-fca3-00006a26c1e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/bin.sh","pattern":"[url:value = 'http://221.1.247.58:51510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aabfb2b-a195-19a6-00c5-00007622aef3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/bin.sh","pattern":"[url:value = 'http://105.154.98.198:48439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473f7804-bfbe-fb42-b43e-0000a2ff33f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/bin.sh","pattern":"[url:value = 'http://113.231.100.15:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7eb96d-62d2-a788-2d99-000036c3546b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/i","pattern":"[url:value = 'http://105.154.98.198:48439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2b1766-1996-fb8e-71a6-000011138f60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv5l","pattern":"[url:value = 'http://31.76.20.19/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bddde71-f832-bd99-71c5-0000469c010a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/ppc64","pattern":"[url:value = 'http://31.76.20.19/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4da6173-e5c0-6921-f077-0000b821f27f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mipsel","pattern":"[url:value = 'http://31.76.20.19/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d092696f-ac3c-dd49-5690-00001dc3ebe5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/x86","pattern":"[url:value = 'http://31.76.20.19/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdda4ca-15e1-1eb6-2694-00005a478100","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/i686","pattern":"[url:value = 'http://31.76.20.19/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81d75e4-81e0-0bca-7848-00006bd3dc00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv7l","pattern":"[url:value = 'http://31.76.20.19/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a492a02-3619-22a7-7167-00009799a4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mips","pattern":"[url:value = 'http://31.76.20.19/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10644a5-d59d-1d5d-1902-000056b3f5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv6l","pattern":"[url:value = 'http://31.76.20.19/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb7692d-c677-5a45-8e51-000025d96673","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/bin.sh","pattern":"[url:value = 'http://123.13.32.25:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba5f9c-b4c5-a6f1-18c7-000016e81f18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/i","pattern":"[url:value = 'http://123.13.32.25:51859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60465e3a-27ba-1380-b40b-0000660db1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/i","pattern":"[url:value = 'http://113.231.100.15:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06a71cea-ad36-e845-0192-0000fec67bc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9df1c0-9956-5b5c-9b5f-0000e6c0ecf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/run.sh","pattern":"[url:value = 'http://2.26.81.123/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792044b7-ce1a-ae69-c2b8-00009b1c078b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm","pattern":"[url:value = 'http://2.26.81.46/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b30c7c2c-4567-e905-9660-00004f1d8048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/spc","pattern":"[url:value = 'http://2.26.81.46/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2fd89d-543b-ef94-fc43-0000e38d1c7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/i686","pattern":"[url:value = 'http://2.26.81.46/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98910620-857a-a8b8-b28b-00001d690782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.m68k","pattern":"[url:value = 'http://2.26.81.46/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf8f3bb-a2af-0f0e-0ae2-0000b18a9c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86","pattern":"[url:value = 'http://2.26.81.46/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14ac275-2088-cb2f-2806-0000c989f2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/ppc","pattern":"[url:value = 'http://2.26.81.46/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cd2dc5-dc10-2bd0-7df7-0000a6edf536","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm5","pattern":"[url:value = 'http://2.26.81.46/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0229bc3e-333e-b86b-4ab6-0000d041f4ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.i686","pattern":"[url:value = 'http://2.26.81.46/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4182022-cc68-767e-68b6-000049576b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/sh4","pattern":"[url:value = 'http://2.26.81.46/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f50c62-fa0f-89b4-4e08-0000de47130a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86_64","pattern":"[url:value = 'http://2.26.81.46/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976283-ad8c-08c8-257c-00002ea5ef12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/m68k","pattern":"[url:value = 'http://2.26.81.46/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5fc7d13-9184-d659-416e-0000c48ce1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/dbg","pattern":"[url:value = 'http://2.26.81.46/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4bd32f6-1d39-d1c8-34c1-00001d9fd158","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.mips","pattern":"[url:value = 'http://2.26.81.46/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e69909c-0e8f-4166-3a91-000045505782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mpsl","pattern":"[url:value = 'http://2.26.81.46/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777a5e84-978b-fb13-6adb-000086a21e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.sh4","pattern":"[url:value = 'http://2.26.81.46/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbb5655-d53f-262c-1576-00002e5339c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mips","pattern":"[url:value = 'http://2.26.81.46/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc34ce9-2cfb-1ac3-5329-00000ce43dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm7","pattern":"[url:value = 'http://2.26.81.46/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba00790f-5185-2a1b-cd5f-000001d7c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.x86_64","pattern":"[url:value = 'http://2.26.81.46/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ffa243-869b-6440-cd47-000037994724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_amd64","pattern":"[url:value = 'http://144.31.30.228/linux_amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bd6afb-df00-fca6-1032-000067259523","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm5","pattern":"[url:value = 'http://144.31.30.228/linux_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c87f6a-9024-9934-6158-00008c2e24e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips64","pattern":"[url:value = 'http://144.31.30.228/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9acb116b-1b3d-f594-8712-0000ef9b59dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips","pattern":"[url:value = 'http://144.31.30.228/linux_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f254de05-4419-3037-bfa8-00008100facb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm64","pattern":"[url:value = 'http://144.31.30.228/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eb30bd7-2ccd-2892-fce8-0000cd2c5da8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm7","pattern":"[url:value = 'http://144.31.30.228/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e65b7ad-fb60-8b4e-72b9-0000b38a266b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/svchost.exe","pattern":"[url:value = 'http://217.60.241.248/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcfcf50-dae1-2b71-9000-0000df737f81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.247/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b7b5df-b35d-da00-b3b6-0000be144bb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81610c63-f490-491c-9f9b-000028e72e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.70.215:55426/i","pattern":"[url:value = 'http://182.119.70.215:55426/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb981b8-a03d-c23f-6eea-0000af1e480f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/tbk_stage1.sh","pattern":"[url:value = 'http://95.155.151.113/tbk_stage1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1360e400-1f15-eee5-f447-000083d6120d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa7c8b-2049-ab3d-18d9-0000ac9fcd47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.11/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a63733-d878-89f6-21e9-00007de9b849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/t","pattern":"[url:value = 'http://95.155.151.113/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5e1e31-6898-116a-c0dc-0000894d8989","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/bin.sh","pattern":"[url:value = 'http://42.239.252.193:40074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123fbb9b-5d67-8945-aada-0000b46748e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_529348465823b047.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_529348465823b047.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cd0235c-fed6-6752-a721-0000a9aa3783","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abfeb4f-4316-9bc4-bb4a-000069e40b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/mort.php","pattern":"[url:value = 'http://217.60.36.94/william/mort.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a0e0e4-aa0c-b961-565c-0000d2356de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/t.php","pattern":"[url:value = 'http://217.60.36.94/test/t.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8638b0-0118-1f99-22ec-0000226c21db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/p.txt","pattern":"[url:value = 'http://217.60.36.94/test/p.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fd6dc2-6693-263d-2be3-000075029c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/wi.txt","pattern":"[url:value = 'http://217.60.36.94/william/wi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a9773c1-d9a8-af40-1a24-00000e629501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ee887-25ce-6394-3fd2-0000911c8fcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.36.94/test/test.bef_fri","pattern":"[url:value = 'http://217.60.36.94/test/test.bef_fri']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9023d3-57b9-5004-ab5c-0000351f2a4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb63fd7-1ce9-592f-5758-0000066c5a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/gg11","pattern":"[url:value = 'http://150.241.65.212:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10649e1-7ce0-d378-97c3-0000948eaea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.68.244:54909/Mozi.m","pattern":"[url:value = 'http://36.70.68.244:54909/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9810004c-26f6-64d3-899c-0000904121f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced1c5b8-b18b-757a-665a-000078622b81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac2211a-8c07-de5e-7b24-00001c32d54d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/bin.sh","pattern":"[url:value = 'http://42.228.104.137:42450/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1cac66-cb6f-ac94-44cb-0000ae9f5de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/i","pattern":"[url:value = 'http://42.228.104.137:42450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2dee7ce-3c74-9f64-661f-00001f1364fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://smmnet.store/Setup.rar","pattern":"[url:value = 'https://smmnet.store/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf5aa84-e48d-6766-864c-00008b75a44e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm","pattern":"[url:value = 'http://185.93.89.72/mirai.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f437fe-c694-9132-c1c6-000061fb8d76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/img_155944.png","pattern":"[url:value = 'https://seasquadshipping.com/old/img_155944.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a7f94b-9bbe-76f0-daa5-000005754be6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/MSI_PRO.png","pattern":"[url:value = 'https://seasquadshipping.com/old/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ee2ad-ff78-2622-f004-0000c54d6654","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mips","pattern":"[url:value = 'http://185.93.89.72/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1872d67b-a9e1-1a00-20d5-0000c5bbb08e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.m68k","pattern":"[url:value = 'http://185.93.89.72/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cdce11-0164-3a2f-a11f-0000593ec8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.sh4","pattern":"[url:value = 'http://185.93.89.72/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808cd23c-a52f-918a-deba-00008e07314c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.i586","pattern":"[url:value = 'http://185.93.89.72/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e28993d-f11a-39ab-04fe-00004df3aaaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm5","pattern":"[url:value = 'http://185.93.89.72/mirai.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8026f811-d2fe-cd98-55e1-0000e7fa6221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm7","pattern":"[url:value = 'http://185.93.89.72/mirai.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86d9921f-0a39-bd1c-4e78-00005f74238d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.spc","pattern":"[url:value = 'http://185.93.89.72/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659cafa7-55ef-2829-455f-0000f8677167","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.x86_64","pattern":"[url:value = 'http://185.93.89.72/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4801c0-0af7-27b5-021a-000004c52b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://nodemetrics3379.com/update/exe","pattern":"[url:value = 'http://nodemetrics3379.com/update/exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849f2c46-69db-8675-f4a2-0000d9e05123","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.ppc","pattern":"[url:value = 'http://185.93.89.72/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d55ac54-7599-5e93-5d5b-000086709521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/i","pattern":"[url:value = 'http://42.239.252.193:40074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496fe891-e9e0-9a12-9837-0000430d920d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1d49dd","pattern":"[url:value = 'http://5.182.210.174/1d49dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95320d1b-dfa8-8f7d-5bef-0000997c2667","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dcdd69","pattern":"[url:value = 'http://5.182.210.174/dcdd69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9985b25-841f-36bf-015b-00006d6b5e85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61f089","pattern":"[url:value = 'http://5.182.210.174/61f089']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459f964b-3c51-ed9b-b1f9-0000cf128483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c3106e","pattern":"[url:value = 'http://5.182.210.174/c3106e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba3d8e2-900c-56d5-9c4e-0000582efcbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b9ac2","pattern":"[url:value = 'http://5.182.210.174/1b9ac2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30220d74-bc29-4d4d-0469-0000c740babb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e1bf38","pattern":"[url:value = 'http://5.182.210.174/e1bf38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a5ed65-9f27-0dab-96c0-0000f7069647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/03ab36","pattern":"[url:value = 'http://5.182.210.174/03ab36']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263f5693-c86a-acef-7d7a-000051a494ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98953a","pattern":"[url:value = 'http://5.182.210.174/98953a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c02d36d-ad15-5cd5-9ccd-0000f062eab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8cf703","pattern":"[url:value = 'http://5.182.210.174/8cf703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1119c68f-9b1d-f39a-2125-0000e7d4c10a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c8bc3c","pattern":"[url:value = 'http://5.182.210.174/c8bc3c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c41967b2-74ef-cc25-0695-00007c7b3ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61d4b3","pattern":"[url:value = 'http://5.182.210.174/61d4b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3828279f-64d1-fcf8-9dc3-0000ed49a0c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/cd5c35","pattern":"[url:value = 'http://5.182.210.174/cd5c35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2779d8ed-9992-a688-9a2b-0000357480f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/537b66","pattern":"[url:value = 'http://5.182.210.174/537b66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b160a6-9212-b953-7fa7-0000f0188c38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3abc4d","pattern":"[url:value = 'http://5.182.210.174/3abc4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b507f5f7-6765-3cf7-ecbb-0000b352a015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3cf53c","pattern":"[url:value = 'http://5.182.210.174/3cf53c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65223c09-db0f-7727-33c7-00005d34465f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.90.163.37/powerpc","pattern":"[url:value = 'http://45.90.163.37/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccb8860-9b85-061d-18a9-0000434d87b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/51fc22","pattern":"[url:value = 'http://5.182.210.174/51fc22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6faed4-af46-2a42-b9b3-0000937f35d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ca6953","pattern":"[url:value = 'http://5.182.210.174/ca6953']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee403b5-f9de-ded8-3925-0000bba90c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d3a258","pattern":"[url:value = 'http://5.182.210.174/d3a258']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d098b5ac-cc6f-a8fd-dfdd-00004372a0f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a2daa","pattern":"[url:value = 'http://5.182.210.174/6a2daa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368e0871-5b47-98fe-6772-0000639c63d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45cbd5","pattern":"[url:value = 'http://5.182.210.174/45cbd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ed7a12-6c3c-3701-14c6-0000e0bf3d3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e2ee47","pattern":"[url:value = 'http://5.182.210.174/e2ee47']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dec80b6-bd37-1038-0971-0000a79af159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d620","pattern":"[url:value = 'http://5.182.210.174/c5d620']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea90e586-2476-e283-24ce-0000c2c8b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/171868","pattern":"[url:value = 'http://5.182.210.174/171868']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9512f7ef-314b-70b5-910d-0000fe8cd494","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aecb15","pattern":"[url:value = 'http://5.182.210.174/aecb15']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126be9a5-6467-c4de-3cd2-00007e192a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ff1781","pattern":"[url:value = 'http://5.182.210.174/ff1781']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f997ea4e-8545-63cf-3903-00004488f81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3a2ee0","pattern":"[url:value = 'http://5.182.210.174/3a2ee0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac6009e-2595-9003-9d18-000071fcb7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/174cb4","pattern":"[url:value = 'http://5.182.210.174/174cb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--931039db-9a26-7490-fdd6-000066990232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/28d4d8","pattern":"[url:value = 'http://5.182.210.174/28d4d8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd656a1-78c2-8ecd-a753-0000af9dff71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/748306","pattern":"[url:value = 'http://5.182.210.174/748306']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b75bf3-7150-1c71-72ec-00004fbe2ad4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00d054","pattern":"[url:value = 'http://5.182.210.174/00d054']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d293b17-7a48-1fee-942e-0000931f8752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fff372","pattern":"[url:value = 'http://5.182.210.174/fff372']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678eb139-7e70-0503-16f2-00002812aa08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e44028","pattern":"[url:value = 'http://5.182.210.174/e44028']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee6ff7-6bc4-6fe5-a1be-0000e12a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/035755","pattern":"[url:value = 'http://5.182.210.174/035755']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c461fc60-c07b-0bcb-3234-00003e1d7135","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44066b","pattern":"[url:value = 'http://5.182.210.174/44066b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebcfe3d-7d88-a027-0c66-0000902d0097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6d0d44","pattern":"[url:value = 'http://5.182.210.174/6d0d44']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c43d73-09a1-e031-7669-00005420dd30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7a276a","pattern":"[url:value = 'http://5.182.210.174/7a276a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108b85cf-e21b-84b8-4ac6-0000521ba265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/img/img_081951.png","pattern":"[url:value = 'http://204.77.9.56/img/img_081951.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d11bdc-7d12-9622-c804-00002807a095","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta","pattern":"[url:value = 'http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d9e5488-a8a5-1f5e-3e68-0000d23029f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--959140a4-7e9e-f4a7-f819-00005d765c50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90cb09","pattern":"[url:value = 'http://5.182.210.174/90cb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78581513-748f-de62-3c47-0000b813672d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/828087","pattern":"[url:value = 'http://5.182.210.174/828087']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f782d83-6e37-8b6f-9825-000069f143b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bf1cf","pattern":"[url:value = 'http://5.182.210.174/8bf1cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f64c3-7394-5600-639c-0000d068ee12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70d8b3","pattern":"[url:value = 'http://5.182.210.174/70d8b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b743b674-96a4-eb8f-b1ac-0000fac49c81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/657b82","pattern":"[url:value = 'http://5.182.210.174/657b82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94f722fa-1e69-eb67-b2d5-0000c84e92a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/60f898","pattern":"[url:value = 'http://5.182.210.174/60f898']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d2dc1d-3e1a-4287-7327-0000a5d84c76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c99e43","pattern":"[url:value = 'http://5.182.210.174/c99e43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2af8f1-3f26-a822-3e54-000047aefea0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/671030","pattern":"[url:value = 'http://5.182.210.174/671030']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60c38-d6af-fb71-3daa-000050b9a812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/eb77a9","pattern":"[url:value = 'http://5.182.210.174/eb77a9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a26a6c7-6743-be31-76ff-00004ac65b83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8413a4","pattern":"[url:value = 'http://5.182.210.174/8413a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad08db5-08d5-b54b-d3bc-00003f1d4d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/320b53","pattern":"[url:value = 'http://5.182.210.174/320b53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09036550-1dbd-2de3-406f-00001949a54f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1903e1","pattern":"[url:value = 'http://5.182.210.174/1903e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36abd886-6336-a1e5-f3e0-0000192b17dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.160.130.168:43943/bin.sh","pattern":"[url:value = 'http://103.160.130.168:43943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abeaeee9-9d86-cf4c-6081-0000d2677b2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/i","pattern":"[url:value = 'http://119.115.36.34:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16d3b6f-c624-6ce1-fcf2-0000b84c3bbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/bin.sh","pattern":"[url:value = 'http://45.194.25.221:39724/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a425480-80f6-c1c1-fcb7-00005346e648","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/i","pattern":"[url:value = 'http://45.194.25.221:39724/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f63965d-fb97-6c65-50e1-000063b2e54c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/bin.sh","pattern":"[url:value = 'http://182.116.120.105:42593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b971ce43-b258-d9ac-1494-0000f4d1cde4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/i","pattern":"[url:value = 'http://182.116.120.105:42593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f846f6e0-aca1-3201-b7df-000080cd3768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/i","pattern":"[url:value = 'http://182.121.155.69:33600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eb1799a-25b2-f38f-02a8-000046693933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/bin.sh","pattern":"[url:value = 'http://219.155.11.56:58484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18c2464-4a11-6d3f-b0f5-0000ae4e081e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mpsl","pattern":"[url:value = 'http://185.93.89.72/mirai.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401e13cd-c73c-fde0-916f-0000f6e13c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/bin.sh","pattern":"[url:value = 'http://144.48.123.149:37810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e9da2e-b4fe-f2ae-587a-000064a4599a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.54.103.153/50/givingbesthingsforbetterforme.hta","pattern":"[url:value = 'http://209.54.103.153/50/givingbesthingsforbetterforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316efc5d-6a16-e2ee-cc22-000082111a92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/i","pattern":"[url:value = 'http://219.155.11.56:58484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c912aab-3de7-2b17-374f-0000c93898c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/i","pattern":"[url:value = 'http://123.12.191.97:55649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5737c39d-c4b7-8e2a-1bec-000059d74fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.arm","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3343ed67-e278-1e42-d0ae-0000bdeb05b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bash.sh","pattern":"[url:value = 'http://176.65.139.131/phantom_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73e4431-5586-58f8-6d08-000084ab5d14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.x86_64","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302e8804-e6d0-fd24-bab3-0000dcf3f2ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.mips","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7cdb62-8dd9-032e-561b-0000845a7be8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/dbg","pattern":"[url:value = 'http://176.65.139.132/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afca6404-7042-9a7d-3ed2-0000895f68d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/ppc","pattern":"[url:value = 'http://176.65.139.132/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca79759-241e-6b97-e0b9-0000e1a97acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mips","pattern":"[url:value = 'http://176.65.139.132/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd8bd73-25d2-eccb-cc9c-00007ba219db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm6","pattern":"[url:value = 'http://176.65.139.132/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8cda5d-00bb-35af-386b-00000fcb1a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/spc","pattern":"[url:value = 'http://176.65.139.132/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808ba38f-2918-6d76-0a9f-0000e15fac11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/m68k","pattern":"[url:value = 'http://176.65.139.132/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704a00dc-eb4e-ab97-798f-0000e6ec2104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/d.sh","pattern":"[url:value = 'http://176.65.139.132/d.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da988653-ae95-4a2e-be74-00000981f126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/sh4","pattern":"[url:value = 'http://176.65.139.132/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79755190-673d-09c4-80f5-00008aaa1481","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mpsl","pattern":"[url:value = 'http://176.65.139.132/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827855ca-00b3-d83c-0e5e-0000f15c06a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86","pattern":"[url:value = 'http://176.65.139.132/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a0e2c6-ba1e-b0b4-e1df-0000dbca9dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm","pattern":"[url:value = 'http://176.65.139.132/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d1ecc9-9f28-77e8-c866-00006917b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm5","pattern":"[url:value = 'http://176.65.139.132/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a331991-63c3-1da4-4fa1-00002c775f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/i686","pattern":"[url:value = 'http://176.65.139.132/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18df8de5-620a-f51f-d38e-0000c31e7ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm7","pattern":"[url:value = 'http://176.65.139.132/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35239654-7001-aab2-6dc8-00001abf9f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86_64","pattern":"[url:value = 'http://176.65.139.132/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a57576e1-f3ce-fc31-c2a8-0000055ca45f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c2","pattern":"[url:value = 'http://176.65.139.132/c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7c275b-251f-b37e-0ec9-000017e90bb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c1","pattern":"[url:value = 'http://176.65.139.132/c1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abfac54a-30de-4ef9-32c4-0000629e751a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv6l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d79689-fe10-f0fd-22bd-0000253e0fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv5l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291982ff-fe9e-9d3f-d497-000027302363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i486","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e1f40b-9635-128d-a236-00005ffe5caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv7l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cca7c8-7c59-ded8-7965-0000185e267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0037cd-94e8-ce85-63af-0000fd06e083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d340fafb-c0ce-eba7-dd2f-0000d56891eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.x86_64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355ad295-91f2-3788-a462-0000371e20f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4eb","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--813bdc82-df80-7fb5-3676-00008a41e9f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.armv4tl","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4tl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b025ec8f-0f59-26e8-b364-0000a7d07104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.m68k","pattern":"[url:value = 'http://176.65.139.130/bins/bin.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9d5691-1906-9ac5-337a-00006af88268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i686","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28dbe8c8-6083-23a5-0aa1-0000ec6cf0c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i586","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1286fbc-cede-5745-11ad-0000efe29d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.sh4","pattern":"[url:value = 'http://176.65.139.130/bins/bin.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe26e09c-a833-b178-1e15-00008c0c72d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mipsel","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e20408-789c-3438-0b45-0000d00d5251","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1d869d-6a09-a5d9-7707-00000f623d03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc-440fp","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc-440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09d859-dc93-8b9f-4c9b-0000a726a7de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17715e6-fdaf-d505-99e1-0000a0cdebd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/i","pattern":"[url:value = 'http://144.48.123.149:37810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fed631db-38ef-43b3-9ad2-0000dc47efd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b04f712-1529-389a-8465-0000b7448198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.67/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fa050d-1a37-229d-458d-0000dcb13908","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.67/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb234e6-a25c-7291-a1ba-0000c75cc8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a04a4b-2234-dfae-99a1-000054f9232c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6a83ea-0da5-f188-0426-0000edca53d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da91bf1-14a1-3b3c-4840-0000464c8cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06000528-d63b-32d9-8f6b-0000bf5fa6b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.67/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac1852-248e-6890-c990-0000c635c83e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/ohshit.sh","pattern":"[url:value = 'http://94.154.43.67/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7352e77f-4887-a538-92fa-00003f813f43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.67/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aae2b67-410b-0b41-f05b-0000fef0eba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0446bb71-7e74-e43e-8a07-000039cbd41b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.spc","pattern":"[url:value = 'http://94.154.43.67/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682d32f1-f918-e5df-673e-0000e8df5425","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/bin.sh","pattern":"[url:value = 'http://110.36.16.115:34086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e78be04-b147-af37-6681-0000d7e79704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/bin.sh","pattern":"[url:value = 'http://42.234.186.105:46982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53d2e04-262a-a9cc-06c9-0000a010a8fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/bin.sh","pattern":"[url:value = 'http://182.121.155.69:33600/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff629f5-aa2b-d21c-f38c-000057e13c78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/i","pattern":"[url:value = 'http://110.36.16.115:34086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eac546b-e088-6fbf-3640-0000b14316b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/i","pattern":"[url:value = 'http://110.39.233.226:51559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b9985-fe20-0ca4-470b-0000396e646b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/bin.sh","pattern":"[url:value = 'http://212.169.147.128:38805/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17381db3-f01e-3204-5ff5-0000e400d172","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/bin.sh","pattern":"[url:value = 'http://123.13.115.219:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2be1ac86-490c-4cef-a5a1-0000c47103bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/i","pattern":"[url:value = 'http://200.115.102.2:47663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff2a570-0e81-f3d6-85ea-00002044f63d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.138.135:48639/bin.sh","pattern":"[url:value = 'http://115.203.138.135:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89f3afe-a2d2-3c5f-9373-00000e354b00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/i","pattern":"[url:value = 'http://219.156.18.240:56348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c77f929-f8bd-7934-c246-0000c8f586e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.202.24.36:37993/bin.sh","pattern":"[url:value = 'http://27.202.24.36:37993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecbd995-2c2c-9f1a-f61d-000053e25a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/i","pattern":"[url:value = 'http://61.52.33.47:57035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a837c-7427-c7f1-f390-00002f3ab7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/bin.sh","pattern":"[url:value = 'http://202.1.26.69:42948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1d4cc9-7df5-648e-9482-000055c284fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3be91ff-f59c-7e3f-e642-00000e6d5450","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.14:38104/bin.sh","pattern":"[url:value = 'http://221.15.12.14:38104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f7d358-ccf0-e3e2-f9a9-00001f15cb34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/i","pattern":"[url:value = 'http://123.13.115.219:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d9b5d17-ac20-ed69-8d87-000085d799d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/i","pattern":"[url:value = 'http://115.49.198.105:41583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e0a2-6207-049b-1647-00001cf2aa26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/i","pattern":"[url:value = 'http://182.113.203.41:58932/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff4a808-6f89-0f10-d9c4-0000266b141d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.25.171.108:39654/i","pattern":"[url:value = 'http://78.25.171.108:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23032efe-1b2e-f61c-6e51-0000d92243c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/bin.sh","pattern":"[url:value = 'http://123.11.64.213:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af34c2d-0a87-8443-c648-0000bc9b33f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/i","pattern":"[url:value = 'http://42.235.73.160:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9101a-f920-69bf-a1ef-00006b643b94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/i","pattern":"[url:value = 'http://219.155.132.216:54527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168e570-c41b-7ba0-1004-0000c0e7c3ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/i","pattern":"[url:value = 'http://115.50.51.98:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e04f1f8-5a2b-181a-cfa3-0000456b734d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.215.27:37136/i","pattern":"[url:value = 'http://182.113.215.27:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50020564-0224-9400-beec-000028d1b36b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/bin.sh","pattern":"[url:value = 'http://115.50.51.98:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1872e0-99cb-b79a-876e-000053f11691","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.224.62:58009/i","pattern":"[url:value = 'http://182.113.224.62:58009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa05f60-6dbf-6c89-c639-000057546c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.203.255:46437/i","pattern":"[url:value = 'http://182.126.203.255:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacab5c8-bfec-b389-0402-000089c9f3bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/bin.sh","pattern":"[url:value = 'http://115.62.155.31:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72442366-61c5-a144-6443-0000773400a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/i","pattern":"[url:value = 'http://103.172.186.165:43638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60bf2-bdbe-a4e5-945d-000083c02d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/i","pattern":"[url:value = 'http://123.12.46.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa01160f-8b48-6b7e-aa10-000094b58778","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/i","pattern":"[url:value = 'http://105.186.143.37:55447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf902995-fbd2-a140-d64a-0000bbe733d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.57.254:59568/i","pattern":"[url:value = 'http://175.150.57.254:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64562bc-e1e3-af99-cb58-0000694ffe26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/i","pattern":"[url:value = 'http://123.10.58.106:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f83772-66ef-f107-8614-0000806223fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/i","pattern":"[url:value = 'http://115.62.155.31:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8996d244-c24d-12cd-0b9d-00002987f1d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/i","pattern":"[url:value = 'http://178.141.132.110:51968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e13ca23a-dde5-de90-fbf7-00006ed487e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/bin.sh","pattern":"[url:value = 'http://222.140.218.50:48585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eed49ad-68b4-4290-694d-0000dad6e11a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.131.48:48702/i","pattern":"[url:value = 'http://123.129.131.48:48702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928f5e6e-6afe-805e-ed51-0000ef004d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.236.8:39421/i","pattern":"[url:value = 'http://125.47.236.8:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746d08c5-4a4e-b990-9cc3-000098c8869c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/i","pattern":"[url:value = 'http://123.8.35.65:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b852f4-0fa7-7c5b-96db-00000b8c9afb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/i","pattern":"[url:value = 'http://125.45.146.236:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3798c839-59c7-0fbe-6753-0000223bddb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.208.16.252:3588/i","pattern":"[url:value = 'http://58.208.16.252:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e87d5e-e746-4472-3dea-0000a6142b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/bin.sh","pattern":"[url:value = 'http://42.5.247.27:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156e6512-8123-8aa0-55cb-00005954e118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/bin.sh","pattern":"[url:value = 'http://36.97.90.188:53553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd212b70-e840-6a40-dadd-00009a9ec014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/i","pattern":"[url:value = 'http://36.97.90.188:53553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fb22b-2a6d-4dbb-2134-000086223d1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/bin.sh","pattern":"[url:value = 'http://162.246.26.77:54746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55793f49-367c-6b4c-23c7-0000fa3a1010","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/bin.sh","pattern":"[url:value = 'http://182.113.203.41:58932/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db855758-77a7-2288-7dc2-0000fef18641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/i","pattern":"[url:value = 'http://66.8.135.142:50653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4551a0a4-a336-a28c-a1f4-0000986c6ddc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/bin.sh","pattern":"[url:value = 'http://182.127.69.34:57222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a9833-22dd-830d-bb68-0000db1386c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.251.225.122:36907/bin.sh","pattern":"[url:value = 'http://112.251.225.122:36907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5187a86e-4967-6a7a-88b5-0000a33d83b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.66.105:43207/bin.sh","pattern":"[url:value = 'http://42.180.66.105:43207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23140b4f-7826-2b83-f8da-0000769e82c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/bin.sh","pattern":"[url:value = 'http://125.45.56.103:35641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1c4b5c-ea30-c5e1-ddfd-0000965c5835","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.246.124:41208/bin.sh","pattern":"[url:value = 'http://119.115.246.124:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5fa61-3150-9d5a-0877-00008350fbfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/i","pattern":"[url:value = 'http://125.41.2.23:55597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46752bc-8143-fb9a-d9c8-000063698953","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/bin.sh","pattern":"[url:value = 'http://178.141.132.110:51968/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--822f072b-8019-2ce9-3e0e-000024fe47b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.157.187:43642/bin.sh","pattern":"[url:value = 'http://42.230.157.187:43642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014c340d-6058-dd7c-5387-000038ee28b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.5.189:45058/bin.sh","pattern":"[url:value = 'http://110.136.5.189:45058/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798b91a2-119b-40d5-0508-00003cba2d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/bin.sh","pattern":"[url:value = 'http://123.8.35.65:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44485420-813b-3d27-91ec-00006aeb52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/bin.sh","pattern":"[url:value = 'http://123.12.191.97:55649/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48e18fb-cb0d-19ed-def0-0000c5fcef15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/bin.sh","pattern":"[url:value = 'http://39.73.172.141:48914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397e33ab-b812-ef11-3dfd-0000628dce1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/i","pattern":"[url:value = 'http://125.45.56.103:35641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5e6dd1-a6ab-54f6-d2c7-000024bd731d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/bin.sh","pattern":"[url:value = 'http://222.140.197.124:40018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5dbf536-ead6-25a0-1d2f-0000ac5ac2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.114:34219/i","pattern":"[url:value = 'http://115.48.147.114:34219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3875d6-e1cd-d479-a396-0000073839ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/i","pattern":"[url:value = 'http://222.138.151.112:58571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a13c236-d6b5-6e2f-a1db-0000a9e22814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/i","pattern":"[url:value = 'http://222.220.238.254:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd4713f-c9b1-c326-a0e6-00006cdbb955","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/i","pattern":"[url:value = 'http://27.221.246.187:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c749996-d665-347d-47a7-0000fa0305f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/bin.sh","pattern":"[url:value = 'http://119.115.36.34:51030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77bceee-998f-6f1c-270b-0000c5a4ea87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/bin.sh","pattern":"[url:value = 'http://42.234.191.110:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c98247a-af19-18b5-fdb2-0000a22c5274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/bin.sh","pattern":"[url:value = 'http://182.116.85.112:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5d216c-2803-ec33-b5d8-00002cfe4f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/i","pattern":"[url:value = 'http://42.234.191.110:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07952194-a4fc-fd06-db21-0000029627ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.148.216.12:43983/bin.sh","pattern":"[url:value = 'http://123.148.216.12:43983/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57dce9b8-b51a-0373-7aa2-00003fe23c0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/i","pattern":"[url:value = 'http://125.44.52.171:42860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3ad6fb-3e15-9b76-f9e1-00005c89624f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.32/zot","pattern":"[url:value = 'http://213.177.179.32/zot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7645deaf-76b9-04e3-37cf-00003f5f020b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/i","pattern":"[url:value = 'http://222.140.197.124:40018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb3d0847-4f99-90cf-7e5d-000011121849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.241.62:53088/bin.sh","pattern":"[url:value = 'http://115.55.241.62:53088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7eb39a-5410-153c-d911-00007ca7d965","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/i","pattern":"[url:value = 'http://83.219.1.198:35955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9ba1-caa8-22f0-de02-0000a9ce9f5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/bin.sh","pattern":"[url:value = 'http://105.186.143.37:55447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3711cea-459f-d203-007e-000091760cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/i","pattern":"[url:value = 'http://212.169.147.128:38805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a57d199-3b60-de4b-e30a-00006b98f6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.7.234:37031/bin.sh","pattern":"[url:value = 'http://175.175.7.234:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d20755-90c5-26ff-bdd1-0000b99d8c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/i","pattern":"[url:value = 'http://125.44.18.255:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53b37d6-e5ca-829f-ff82-00005c7e45d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/i","pattern":"[url:value = 'http://42.5.247.27:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5130d6eb-0ab8-e981-254b-0000a07a288b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:54934/bin.sh","pattern":"[url:value = 'http://95.9.35.137:54934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7291f94c-d963-66e8-35fc-0000cf80c85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.78.13:52046/bin.sh","pattern":"[url:value = 'http://175.173.78.13:52046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281f9ab4-a6e3-78f1-3b1f-000030877c2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.189.81:42693/bin.sh","pattern":"[url:value = 'http://123.14.189.81:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be9b52c-3296-460f-2dd6-00008545fa70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/bin.sh","pattern":"[url:value = 'http://115.57.185.130:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb45a9d-9cf1-a134-63fb-00008de5ac88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/bin.sh","pattern":"[url:value = 'http://222.138.151.112:58571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04822737-78b9-2a64-364a-00000c21e6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/bin.sh","pattern":"[url:value = 'http://219.155.132.216:54527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3e9d186-eb53-04f0-f2f8-0000503b8cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/bin.sh","pattern":"[url:value = 'http://61.52.33.47:57035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1b89-9368-f216-9ecf-0000a4131048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/i","pattern":"[url:value = 'http://61.137.195.76:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4721635c-10f4-cfb7-7ea6-00009369ba07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/bin.sh","pattern":"[url:value = 'http://83.219.1.198:35955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab217bc-0ba3-756b-7cfc-000018de1406","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/i","pattern":"[url:value = 'http://42.85.134.175:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1733cd35-77b6-5788-7b23-00001752aad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/bin.sh","pattern":"[url:value = 'http://115.57.215.99:50083/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c50dde-938b-d491-fb43-00002dc11582","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/i","pattern":"[url:value = 'http://175.149.219.183:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82832241-3816-73a4-e945-0000562d3661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/bin.sh","pattern":"[url:value = 'http://110.39.233.226:51559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47086850-dff1-13f5-665d-00003b3502c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/i","pattern":"[url:value = 'http://222.140.218.50:48585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397fdf19-97b2-2391-49eb-0000219b6815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/bin.sh","pattern":"[url:value = 'http://123.10.58.106:59256/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9edbaf-afde-14bd-edf2-00005329fdea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.160:52311/bin.sh","pattern":"[url:value = 'http://120.28.194.160:52311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5626c54f-86f3-3862-caf2-0000eb3029f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/i","pattern":"[url:value = 'http://175.151.64.247:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ea982-da44-646e-9bff-00007eb53370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.2.69:46177/i","pattern":"[url:value = 'http://182.117.2.69:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97aa1e7-3ce1-0670-48f2-00005f1796d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/i","pattern":"[url:value = 'http://219.155.228.87:54535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb52b1e-c6d4-1c83-83b8-00002fb571d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/i","pattern":"[url:value = 'http://115.57.185.130:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ca75fe-2d7e-bbe3-ee7d-000062d5bdae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/i","pattern":"[url:value = 'http://125.40.159.186:42538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c6870d-9472-a295-7051-0000fa6bbf9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/bin.sh","pattern":"[url:value = 'http://221.14.14.94:38720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d199ae-226a-c762-c4de-000076c7e61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.195.40:53219/bin.sh","pattern":"[url:value = 'http://112.198.195.40:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0965093-fc2b-3e13-03d5-0000a8f428d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.118.145:47315/i","pattern":"[url:value = 'http://61.53.118.145:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e2f291a-c4a2-3312-b39c-00000a50c184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/bin.sh","pattern":"[url:value = 'http://123.12.46.36:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f7f615-7026-d064-6e92-00008fa40539","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.197.66:51494/bin.sh","pattern":"[url:value = 'http://61.137.197.66:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64984b9a-049b-d1ed-46bc-0000e9abf554","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/bin.sh","pattern":"[url:value = 'http://125.41.2.23:55597/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d5248b-d678-7b25-9483-00001e4776e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/bin.sh","pattern":"[url:value = 'http://27.221.246.187:34948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfde8d-ea66-2182-36ec-0000144ceafb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/i","pattern":"[url:value = 'http://115.57.215.99:50083/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec24814c-4871-a204-e607-0000936d7c3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/bin.sh","pattern":"[url:value = 'http://42.85.134.175:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb579c5-9908-b88a-80c4-000026e49497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/i","pattern":"[url:value = 'http://221.14.14.94:38720/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41aa7c44-acd2-6ff5-73c9-0000366c1cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/bin.sh","pattern":"[url:value = 'http://219.156.18.240:56348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8112b2-5ae8-e4ac-2fc8-0000d0e7ac28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/bin.sh","pattern":"[url:value = 'http://113.230.51.31:34338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b4b374-95ff-6ced-1e22-0000a46a0f5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.229.171:36842/bin.sh","pattern":"[url:value = 'http://219.155.229.171:36842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b51da7-04f2-07aa-3498-00006c2625a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.232.174:49324/i","pattern":"[url:value = 'http://222.137.232.174:49324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a94dfaa-a900-78dd-c36e-0000d15b13cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.52:57834/bin.sh","pattern":"[url:value = 'http://182.129.144.52:57834/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f0d6ea-5e5b-b3cd-32fd-00003adc8078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/bin.sh","pattern":"[url:value = 'http://125.40.159.186:42538/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c2fa8f-3983-2d3d-4de2-00008526b3cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/i","pattern":"[url:value = 'http://182.116.85.112:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684c608e-daa4-6373-e54a-0000054a1550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.73.48:41032/i","pattern":"[url:value = 'http://175.151.73.48:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--217c4a0e-ad85-b594-e95a-0000adcdf21d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/i","pattern":"[url:value = 'http://114.228.239.251:54062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e515aa-637f-7ecb-0f7c-0000c74c6d5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.226.228:44054/i","pattern":"[url:value = 'http://27.37.226.228:44054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1582c38d-7cc5-c782-97ed-0000fefaabe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/i","pattern":"[url:value = 'http://42.225.220.81:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94a1053f-d09f-0f1a-8266-000007e780ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/i","pattern":"[url:value = 'http://182.119.120.150:46472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbf3c24-879a-3927-28b8-0000e31f7ccb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/bin.sh","pattern":"[url:value = 'http://222.220.238.254:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e876a64-7176-ed9e-912d-00005766b392","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/i","pattern":"[url:value = 'http://222.137.39.216:48007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcab9f-74d1-cd6d-56b1-0000fbc161ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.6.81:41787/i","pattern":"[url:value = 'http://140.237.6.81:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1caa21c3-bd81-7b1e-b510-0000dd0332be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.62.77:52860/i","pattern":"[url:value = 'http://112.242.62.77:52860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1fe838-342c-944e-7524-0000c5a185cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/i","pattern":"[url:value = 'http://123.188.223.103:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7109b6c5-574a-70a5-6bef-0000a851a0ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.31.123:48146/i","pattern":"[url:value = 'http://115.203.31.123:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c18c53-42de-d38f-654e-0000e1d9f0b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/i","pattern":"[url:value = 'http://36.69.88.195:51348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ac3fda-374a-f277-8dfa-0000f3d6305e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/syss","pattern":"[url:value = 'http://223.76.100.36/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722fbadf-6e78-e39d-e56a-0000c7584cba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/amd","pattern":"[url:value = 'http://223.76.100.36/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017dc03a-6b0d-982a-c628-000038c4ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/i","pattern":"[url:value = 'http://42.234.186.105:46982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f029cc18-601d-949d-e1a9-0000c3beb7b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/bin.sh","pattern":"[url:value = 'http://219.155.228.87:54535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06968cd-a2d0-006e-8808-0000f44b781e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.120.104.147:8080/d/installer-4","pattern":"[url:value = 'http://87.120.104.147:8080/d/installer-4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a2b13f-8b2a-4288-d7df-00001e47ba7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.136.11:53679/i","pattern":"[url:value = 'http://42.235.136.11:53679/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48d14e2-6dbf-f03b-4d89-0000e3b7696c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.197.245:54778/bin.sh","pattern":"[url:value = 'http://36.70.197.245:54778/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d24d0717-a6f3-5390-a773-0000aa335b63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.193.159:51649/i","pattern":"[url:value = 'http://125.42.193.159:51649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d25159a-d324-c9d7-ac2c-000078434ae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.179:51284/i","pattern":"[url:value = 'http://27.37.101.179:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c4b197-cf9d-fe0f-7d19-00006dfd728d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/bin.sh","pattern":"[url:value = 'http://125.43.36.213:55623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f480240-2359-52c5-122f-0000cedd6361","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd8cd14-7932-68f8-701f-00001905bd1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.152.192:37513/bin.sh","pattern":"[url:value = 'http://61.53.152.192:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb81fd2-f7ef-0ec7-ff4a-0000729b910b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/bin.sh","pattern":"[url:value = 'http://125.44.18.255:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a132a24e-b9d9-008f-2586-0000da946a2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/i","pattern":"[url:value = 'http://125.43.36.213:55623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77430d76-1d73-9e93-b45f-0000fe713f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/bin.sh","pattern":"[url:value = 'http://110.36.86.83:58585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725546e0-ca5a-3749-af0d-0000e0b6d884","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/i","pattern":"[url:value = 'http://110.36.86.83:58585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3f70c7-d374-7a4e-791a-0000f9cf91cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/bin.sh","pattern":"[url:value = 'http://125.44.52.171:42860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c47f77e-a2a2-8372-7e76-0000195ca3d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/i","pattern":"[url:value = 'http://42.235.50.219:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b408eb9f-9a3f-74e5-e8b4-0000b16818c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/144.exe","pattern":"[url:value = 'http://serdaregitim.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4252ad5b-b519-f542-ddcc-00000a5376c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/3.exe","pattern":"[url:value = 'http://serdaregitim.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883583d8-401b-342f-596e-000031f12e05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://166.0.192.57/loader","pattern":"[url:value = 'http://166.0.192.57/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873aeecc-ed9a-25bc-c2c4-00006a322ddd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/bin.sh","pattern":"[url:value = 'http://39.87.217.20:54835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f809643-e26a-f11f-f265-00004c09d8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/i","pattern":"[url:value = 'http://39.87.217.20:54835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5c959a-cc79-368a-9057-00006a191bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/bin.sh","pattern":"[url:value = 'http://222.138.238.78:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f115fd24-aced-57c4-7c6e-000007fdd078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/bin.sh","pattern":"[url:value = 'http://182.121.115.176:33524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15cfa2b1-b80d-1445-6c24-0000a700d0d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/i","pattern":"[url:value = 'http://182.121.115.176:33524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f952594a-dc15-3b00-69ef-000067679b84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/bin.sh","pattern":"[url:value = 'http://42.230.54.173:38816/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bfa500-9fab-73f5-3c1f-00007cd8a35b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/bin.sh","pattern":"[url:value = 'http://101.109.232.82:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd744067-30f1-5066-ac85-00001eff62e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/bin.sh","pattern":"[url:value = 'http://182.113.206.161:49109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b23f4a-7b0e-a722-10be-0000f4cab5b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/i","pattern":"[url:value = 'http://222.138.238.78:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c675dd-9a48-23e1-cc1c-00005168092d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/i","pattern":"[url:value = 'http://42.230.54.173:38816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--053971b3-9a81-2c75-2151-00005a4fc55d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/i","pattern":"[url:value = 'http://101.109.232.82:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a203eed2-0a83-f12b-611c-0000238f2b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/i","pattern":"[url:value = 'http://182.113.206.161:49109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c80cc0-8fbc-1612-f73b-00005cd3d659","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.78.32:51467/i","pattern":"[url:value = 'http://42.226.78.32:51467/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0cbab6-a8ca-1d37-20e4-00002239cdca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/bin.sh","pattern":"[url:value = 'http://182.116.119.9:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876cf71a-6c71-9c27-b9a1-0000fa3e3986","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/i","pattern":"[url:value = 'http://179.108.89.220:55094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef668de-ea76-7636-44ec-00008a9bebbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/i","pattern":"[url:value = 'http://182.116.119.9:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e910c1-de51-f3bb-378e-0000f70ff14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/bin.sh","pattern":"[url:value = 'http://27.215.181.39:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cedcf7f9-90fd-d62f-4a09-00009afbe4ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/i","pattern":"[url:value = 'http://27.215.181.39:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b434b06e-ece1-ab4b-641f-0000734ef93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/bin.sh","pattern":"[url:value = 'http://182.121.46.253:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df2b037-c622-c008-453e-000062248b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/i","pattern":"[url:value = 'http://182.121.46.253:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8362d282-e2f8-410d-7fd0-000006752d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/bin.sh","pattern":"[url:value = 'http://115.49.198.105:41583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9984ddd7-6f24-a49e-178e-0000a2f39ae9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/bin.sh","pattern":"[url:value = 'http://110.38.221.182:35958/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e0db074-a7a6-072c-9e0a-00003dfa57a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/bin.sh","pattern":"[url:value = 'http://118.232.137.101:42009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f98632-bf82-0d40-c6a3-00007a21017d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/bin.sh","pattern":"[url:value = 'http://103.172.186.165:43638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db069ccb-4b98-e396-5a23-00005d1b5cf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/i","pattern":"[url:value = 'http://110.38.221.182:35958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada811ff-2733-6436-bf76-0000c13a7924","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/bin.sh","pattern":"[url:value = 'http://222.141.82.215:49425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0649bd63-95e1-87e2-9607-0000e08c1910","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/i","pattern":"[url:value = 'http://118.232.137.101:42009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7758f539-85fb-7946-c608-0000d3b757f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/bin.sh","pattern":"[url:value = 'http://42.235.50.219:33430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba9aec0-503d-6f3f-57fa-0000fa5759de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/i","pattern":"[url:value = 'http://222.141.82.215:49425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c6c875-27d0-49c9-97a9-0000d768d556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/bin.sh","pattern":"[url:value = 'http://42.178.168.78:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fcf583-0032-a5ca-721a-0000cac54b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/i","pattern":"[url:value = 'http://42.178.168.78:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb537ed3-dee0-7d3c-f598-000038679a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/bin.sh","pattern":"[url:value = 'http://115.55.233.2:37781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e01a6d6-e20a-2101-e6f2-0000f22827eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/bin.sh","pattern":"[url:value = 'http://47.215.224.64:37433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad98508-4fc2-6146-67c6-0000439e1202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.235.157.125:52016/i","pattern":"[url:value = 'http://122.235.157.125:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15925df-034e-c7c4-677d-000088e70ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/i","pattern":"[url:value = 'http://115.55.233.2:37781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee7fbdd-e4cd-134a-3da2-0000b801ac3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/i","pattern":"[url:value = 'http://47.215.224.64:37433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fac271-be82-97a0-916d-000005e1e9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.194:45299/i","pattern":"[url:value = 'http://110.36.72.194:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d403f419-76c9-afdf-ad72-00000e58a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.188:46150/bin.sh","pattern":"[url:value = 'http://182.117.68.188:46150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15114933-5b1b-4b04-a447-00009950cacc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://96.245.232.233:44492/i","pattern":"[url:value = 'http://96.245.232.233:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d56e5a-5566-f597-9b90-0000989a8e42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/i","pattern":"[url:value = 'http://110.37.43.119:54028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dc5980-8451-6f8e-78bc-0000f15f2628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/bin.sh","pattern":"[url:value = 'http://119.183.3.192:41382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1c2656-1406-5a76-b587-00004b98c8a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/bin.sh","pattern":"[url:value = 'http://42.225.220.81:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea8c142-4d84-8847-9558-00008d84d10b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.162.111:53842/i","pattern":"[url:value = 'http://182.121.162.111:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1c5227-5904-55bc-ad76-000055f876ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mipsel","pattern":"[url:value = 'http://45.38.249.63/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--906a3f94-9f25-5dc5-04fd-0000fbd5f768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mips","pattern":"[url:value = 'http://45.38.249.63/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d5c33-d531-a44c-0b28-0000bae47000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/bbc","pattern":"[url:value = 'http://45.38.249.63/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1154be-aec3-e47b-f4fa-00008fd12e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_powerpc","pattern":"[url:value = 'http://45.38.249.63/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937a4840-3585-b8af-bee9-00000c9c95d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86_64","pattern":"[url:value = 'http://45.38.249.63/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1b7492-42b7-10d9-84fa-0000cbd75cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm4","pattern":"[url:value = 'http://45.38.249.63/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331515be-f54b-a9bc-d05b-000061de9478","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm6","pattern":"[url:value = 'http://45.38.249.63/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4786a-2d23-f4df-717b-0000876b9f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_aarch64","pattern":"[url:value = 'http://45.38.249.63/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c4404-133e-c54f-03bd-0000736b3b96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm5","pattern":"[url:value = 'http://45.38.249.63/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44122528-9087-1d56-e026-0000d962f31d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm7","pattern":"[url:value = 'http://45.38.249.63/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcba9c71-31e2-63d5-42aa-00005705d8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86","pattern":"[url:value = 'http://45.38.249.63/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c47c7f-7a4c-1398-8047-0000b4585ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm6","pattern":"[url:value = 'http://2.26.81.46/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40823716-778c-cc1d-4fa7-00007f6cd814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189a956e-16e4-b12a-47ed-0000aad3a799","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/bin.sh","pattern":"[url:value = 'http://222.142.250.250:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dfc762d-5f04-54d1-f212-0000098df017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/i","pattern":"[url:value = 'http://222.142.250.250:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278a792-e97d-d3ed-9789-0000b579fa82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/bin.sh","pattern":"[url:value = 'http://179.108.89.220:55094/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24c5d007-b2a8-8da6-33c7-00009b0fa02f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/i","pattern":"[url:value = 'http://220.192.252.142:56157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e95cbf-ff91-aa86-c9e1-0000f5acb417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/bin.sh","pattern":"[url:value = 'http://1.58.182.84:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fbb00d-d89d-491e-845b-0000320453b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/i","pattern":"[url:value = 'http://42.230.18.71:37623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2e2558-e127-d1e2-2430-0000a2fce713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/bin.sh","pattern":"[url:value = 'http://42.230.18.71:37623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c587810b-c0fb-fa3b-ae55-0000a9671503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/bin.sh","pattern":"[url:value = 'http://182.127.177.126:47422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895236e1-b7d6-da04-45ad-0000502f5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/bin.sh","pattern":"[url:value = 'http://27.37.229.199:49596/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4592ec-60a4-3f71-1328-0000114f3176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.70.28:58014/i","pattern":"[url:value = 'http://110.36.70.28:58014/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab97099a-c8dc-c4b3-bc6c-0000bb5bc58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/i","pattern":"[url:value = 'http://182.127.177.126:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83004697-de9c-ada7-91c7-0000aa0903db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.113.119:35309/i","pattern":"[url:value = 'http://125.40.113.119:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cec78f5-395d-0dfe-ca84-00000923a954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/bin.sh","pattern":"[url:value = 'http://27.201.110.150:57334/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69db9e4-9ea0-9c44-aa1f-0000e124c76c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/i","pattern":"[url:value = 'http://27.201.110.150:57334/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc739be-72b8-7e78-bb6e-000030324cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/bin.sh","pattern":"[url:value = 'http://175.174.68.59:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751e6737-b0e4-27ec-21e8-000005e176cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/bin.sh","pattern":"[url:value = 'http://78.165.236.7:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4736a3c9-d7c2-fc51-dc94-000020989295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/bin.sh","pattern":"[url:value = 'http://125.45.146.236:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6786d90b-139d-5c13-d6e7-0000ac02f26b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/i","pattern":"[url:value = 'http://78.165.236.7:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222edaa9-4f17-7539-a694-000085de0339","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/bin.sh","pattern":"[url:value = 'http://59.96.139.213:39951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbb7a1-82dd-d078-cef4-0000dbfb2033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/bin.sh","pattern":"[url:value = 'http://222.137.39.216:48007/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37388c34-74ec-4f92-0bfd-00006820670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/i","pattern":"[url:value = 'http://175.174.68.59:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7fd13a7-8eb9-b673-ed5b-00008aa2c18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.31.205:34885/i","pattern":"[url:value = 'http://110.36.31.205:34885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b08c4-bcb9-3c3e-bf6d-00004b07696d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/bin.sh","pattern":"[url:value = 'http://138.255.178.214:43405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b2077-4a5f-b70d-d80d-0000ccf59756","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/i","pattern":"[url:value = 'http://59.96.139.213:39951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335a2a72-0a3c-016e-4740-000047d68d61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/i","pattern":"[url:value = 'http://138.255.178.214:43405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fba612-5793-5180-94ad-000039e6024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/bin.sh","pattern":"[url:value = 'http://105.184.72.21:54289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa76e1a4-f0e9-5d05-3777-0000d404a61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/bin.sh","pattern":"[url:value = 'http://42.231.93.114:47497/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ade7cf-32e7-760a-506d-0000d7dd2e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.183.165:44707/i","pattern":"[url:value = 'http://105.186.183.165:44707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbea3596-2742-e0cf-7a16-0000ef0648f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/bin.sh","pattern":"[url:value = 'http://36.69.88.195:51348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73204d35-e317-702f-ab42-0000a86f7326","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/i","pattern":"[url:value = 'http://42.231.93.114:47497/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823c54d6-58bf-6835-1477-00008ccae879","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.4.125:43311/i","pattern":"[url:value = 'http://110.36.4.125:43311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e138016b-7527-2f49-6875-000081ede851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.165:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a8ffa4-404c-faaa-f349-0000612e667f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.32.70:38815/i","pattern":"[url:value = 'http://105.184.32.70:38815/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d34d0c-ae65-983f-a25a-0000a7610e0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://lomeqpe.com/Update_bde3c4.msi","pattern":"[url:value = 'https://lomeqpe.com/Update_bde3c4.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e2506f-7e7e-9a75-f627-000043421742","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/i","pattern":"[url:value = 'http://182.117.78.165:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde58ed3-d2a5-9131-56fb-00000ed96d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.78:52922/i","pattern":"[url:value = 'http://222.142.252.78:52922/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8401674-7787-3b41-54dd-0000cdca719d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.133.165:47739/i","pattern":"[url:value = 'http://123.129.133.165:47739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd55190-7ccb-92e5-04a2-00005c7cb73b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fd7237-c534-ad03-934d-00000b57239b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/bin.sh","pattern":"[url:value = 'http://115.63.203.149:37425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0465d295-9b88-a955-683b-000081780dfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/bin.sh","pattern":"[url:value = 'http://110.37.68.65:46979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e97557-f809-9b09-9356-0000161baa50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_sh4","pattern":"[url:value = 'http://62.60.249.165/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d111c2-c165-75bd-cea1-0000c450c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm","pattern":"[url:value = 'http://62.60.249.165/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e66e47a-e472-ab9b-7731-000033d35ad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mpsl","pattern":"[url:value = 'http://62.60.249.165/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab9cd22-34fc-fed7-5e51-000003567521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86_64","pattern":"[url:value = 'http://62.60.249.165/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb422b3-98b0-29c4-e790-000058d03499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mips","pattern":"[url:value = 'http://62.60.249.165/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09a6ce-b384-bcc7-e2b3-0000eec65dd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86","pattern":"[url:value = 'http://62.60.249.165/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30519d5-45d3-805f-a3a4-0000945eef21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/bin.sh","pattern":"[url:value = 'http://125.44.32.162:44822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--611004e1-8899-f539-7ded-0000258d2a38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.34.229:59705/i","pattern":"[url:value = 'http://105.184.34.229:59705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61f88ab-43a8-9b69-6d00-00005f09e82f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.106.66:43071/i","pattern":"[url:value = 'http://221.14.106.66:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7bb888-aea5-aba3-e1db-0000f09b839e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/bin.sh","pattern":"[url:value = 'http://114.228.239.251:54062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5e6568-0146-ac4d-041e-000026eb3c9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/i","pattern":"[url:value = 'http://110.37.68.65:46979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ee55d1-b7dd-dad1-71d8-0000f8437ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/i","pattern":"[url:value = 'http://125.44.32.162:44822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4873e5-e66a-9ec8-61f7-0000274ab43d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.141.211:58754/i","pattern":"[url:value = 'http://182.121.141.211:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145aa8a6-6239-e856-1618-0000c4e3ea63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/bin.sh","pattern":"[url:value = 'http://219.157.215.95:55907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75a55654-baf4-afb2-6c6c-0000d59e6e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/bin.sh","pattern":"[url:value = 'http://222.141.143.158:55288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1c4408-7b42-e599-51ae-00007a71c227","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/bin.sh","pattern":"[url:value = 'http://182.119.29.169:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a316ef38-89a5-10ae-555a-0000f33cab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/i","pattern":"[url:value = 'http://219.157.215.95:55907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29394689-3f7c-8be2-2371-0000e3b40503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/bin.sh","pattern":"[url:value = 'http://115.57.249.167:38186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf7836b-b563-1a18-649a-00008383cde2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/i","pattern":"[url:value = 'http://115.57.249.167:38186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489bb36c-ae57-77be-08c8-00001d8ec015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/bin.sh","pattern":"[url:value = 'http://180.191.228.111:60353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a48bd9-cc76-c7b6-4a21-00007fe26d99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/bin.sh","pattern":"[url:value = 'http://115.57.248.80:32935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f88ff3-ded6-cbcb-5ec9-00004c8976a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/i","pattern":"[url:value = 'http://182.119.29.169:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce76465-5b35-505c-4179-000085959591","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/i","pattern":"[url:value = 'http://180.191.228.111:60353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66d4fa3-acbd-60d1-a98e-00006baae85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/bin.sh","pattern":"[url:value = 'http://115.48.148.23:42173/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733a61a1-4edd-1a7c-8dd1-00009626f1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/i","pattern":"[url:value = 'http://222.141.143.158:55288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470007e2-54b6-a217-7123-00001151d7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/i","pattern":"[url:value = 'http://115.48.148.23:42173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7caefc07-14c2-0291-3627-0000785e7309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/i","pattern":"[url:value = 'http://175.174.107.238:46076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ea2d091-9a9f-6e83-a3b9-0000b147909c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/bin.sh","pattern":"[url:value = 'http://123.11.201.153:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce4b430-7390-0511-d15a-0000f7d3edef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/bin.sh","pattern":"[url:value = 'http://125.41.2.135:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4932d811-3dc0-15da-8486-000068a49237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/i","pattern":"[url:value = 'http://123.11.201.153:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86ad91f-d538-bd68-2e17-00001e91575b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/i","pattern":"[url:value = 'http://125.41.2.135:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62babce6-dd06-d0e2-9cc2-00003add52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/i","pattern":"[url:value = 'http://115.57.248.80:32935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9913ea-9977-4c48-4416-0000b83f7ab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.6.205:46320/i","pattern":"[url:value = 'http://125.41.6.205:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edc7c5f-7b6e-1a56-bb17-00009f7984a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/bin.sh","pattern":"[url:value = 'http://116.76.206.254:50342/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a27b90-233f-edd4-4068-0000fd769fbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.228.78:44625/i","pattern":"[url:value = 'http://110.39.228.78:44625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff627cc0-77a4-37f5-8341-000045efe59f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/i","pattern":"[url:value = 'http://110.36.22.249:44558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c01af-b7eb-574b-e5ad-00000d9102ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/bin.sh","pattern":"[url:value = 'http://117.223.140.197:37526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c170bf57-d3e2-bf26-6b64-0000aeddbe11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/bin.sh","pattern":"[url:value = 'http://27.217.139.36:39257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c61ecc-5675-239a-31ed-0000ca857299","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/i","pattern":"[url:value = 'http://117.223.140.197:37526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01720c58-d29e-5610-60ad-0000846765bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/bin.sh","pattern":"[url:value = 'http://222.139.192.15:47283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e6a33e-bad6-8871-1dda-000016c02527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_865135af23551105.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_865135af23551105.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd5a6da-885d-48f0-a97c-00007a8cc833","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/i","pattern":"[url:value = 'http://27.217.139.36:39257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a279e74-ba60-2d15-3171-0000ed469797","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/bin.sh","pattern":"[url:value = 'http://196.189.69.192:41745/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e1d394-e3c8-5943-f97c-000073741146","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/bin.sh","pattern":"[url:value = 'http://27.207.141.23:38567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508016f8-2110-a487-2920-0000be815161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/i","pattern":"[url:value = 'http://123.190.18.137:43516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7233f350-acd4-4153-fdb5-0000188bb804","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/i","pattern":"[url:value = 'http://222.139.192.15:47283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9845922c-f2e1-4cc0-4cb7-000080e0a735","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/i","pattern":"[url:value = 'http://196.189.69.192:41745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49877565-da31-e82f-df85-00009bfed71c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/bin.sh","pattern":"[url:value = 'http://183.48.166.95:59376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d909315-ca37-9f7c-e3a4-000044f86ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/i","pattern":"[url:value = 'http://27.207.141.23:38567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f25ea87-0b41-7287-8603-0000ff998715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.187.158.17:55290/bin.sh","pattern":"[url:value = 'http://119.187.158.17:55290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bada289-534e-954d-05e2-00002ec464f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/bin.sh","pattern":"[url:value = 'http://182.127.190.111:33526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba24a2e-9717-0866-b58a-0000f4eb4bf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/omega/file.exe","pattern":"[url:value = 'http://62.60.226.140/files/omega/file.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d506c90d-7a42-7b92-29b1-00000ff51f1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/i","pattern":"[url:value = 'http://113.230.51.31:34338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904c6fd1-0189-a47d-ecc6-0000e53260ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/i","pattern":"[url:value = 'http://183.48.166.95:59376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b78216-2590-deef-e702-0000b06d46d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/bin.sh","pattern":"[url:value = 'http://182.116.34.137:45967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748d28db-e42c-9bca-1010-0000bbfece3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.62.97:46336/i","pattern":"[url:value = 'http://182.119.62.97:46336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f676717c-bf9c-9779-9c86-000026df48d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/i","pattern":"[url:value = 'http://182.127.190.111:33526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d38a2343-590c-46b2-09c1-0000356e6bbb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/i","pattern":"[url:value = 'http://182.124.9.99:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c016fe3-5bca-2f27-9015-0000cab06cb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.13.17.211:57271/i","pattern":"[url:value = 'http://95.13.17.211:57271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b538220b-33f2-0952-7b37-000077935444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/i","pattern":"[url:value = 'http://182.116.34.137:45967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734b930-eb8e-1fcc-f287-0000c4ae415d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/bin.sh","pattern":"[url:value = 'http://182.120.10.85:50338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec778d5-8726-bdb9-0255-00009dd216c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/i","pattern":"[url:value = 'http://196.190.105.170:60232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68ebf153-0a10-c716-0754-0000a0f33e23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/bin.sh","pattern":"[url:value = 'http://110.37.43.119:54028/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abe43df-5184-a071-21f3-0000852eb574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/bin.sh","pattern":"[url:value = 'http://222.140.196.94:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ceb1de-9b8f-ed31-ae0a-0000f2632da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/i","pattern":"[url:value = 'http://222.140.196.94:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031ddc07-f91b-a1cf-4e5d-0000bfb2b5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:48403/bin.sh","pattern":"[url:value = 'http://210.208.110.42:48403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2364339a-d407-01d7-1a28-0000ba46b8da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/bin.sh","pattern":"[url:value = 'http://42.85.15.27:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7438cdb-7697-3926-d58c-00000d4958c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/i","pattern":"[url:value = 'http://42.86.137.34:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad23381a-8044-5b6b-5487-0000503fae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/i","pattern":"[url:value = 'http://42.58.252.41:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6926ab9-d15a-6984-f52b-0000bfeaf1c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.57.85:57947/i","pattern":"[url:value = 'http://42.180.57.85:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc00995-fd2f-132b-c007-0000450846a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.24.140:51609/i","pattern":"[url:value = 'http://110.36.24.140:51609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e899ffc-34ba-f2cc-9384-00002a156275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/i","pattern":"[url:value = 'http://110.36.91.33:35795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e99e17-fac9-61b1-9d56-0000db0b0d46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/i","pattern":"[url:value = 'http://110.36.72.182:41495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302fe188-62fa-8f4b-240c-0000f7e4f052","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/i","pattern":"[url:value = 'http://110.36.1.200:60120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861d2fa4-6368-b409-a67f-00005b1de420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/bin.sh","pattern":"[url:value = 'http://110.36.22.249:44558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58837e62-dec5-4d7c-d416-00007a28dc5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/bin.sh","pattern":"[url:value = 'http://196.189.35.226:40707/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ad8339-ff9b-6dd0-05c4-000067058fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.94.51:47055/i","pattern":"[url:value = 'http://123.14.94.51:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01fb959a-9522-4500-fafd-000022ab2d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/i","pattern":"[url:value = 'http://182.120.10.85:50338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9d4b-72fc-3c0d-4073-00007d385d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/bin.sh","pattern":"[url:value = 'http://182.119.120.150:46472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1d6918-99d0-cdce-4657-0000317a0b2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://185.141.233.178:38076/i","pattern":"[url:value = 'http://185.141.233.178:38076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6489f685-c9b1-cc7b-236a-0000c50ae11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/i","pattern":"[url:value = 'http://79.106.74.167:44091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460eb40-aa53-bb13-18a9-000074d48325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/i","pattern":"[url:value = 'http://163.142.77.145:55241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0214d7b-60eb-f62e-daa7-0000a56ce3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/bin.sh","pattern":"[url:value = 'http://182.85.43.191:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb69b60-0270-da9e-aa69-00000c16cbc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/i","pattern":"[url:value = 'http://222.136.169.228:49263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae055804-24dc-5e76-c715-0000f177ce0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.254.40:36271/i","pattern":"[url:value = 'http://182.119.254.40:36271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52b1bff-dfd2-6a31-3464-00004f64432c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.160.44:57722/i","pattern":"[url:value = 'http://222.140.160.44:57722/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055fc2d8-6e38-bea1-7459-000075f4d88a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/bin.sh","pattern":"[url:value = 'http://175.149.87.101:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62a9140-98b9-e869-3183-0000370dba55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/bin.sh","pattern":"[url:value = 'http://222.136.169.228:49263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef39c7e-1327-3001-e6d3-00005359667a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/i","pattern":"[url:value = 'http://182.116.113.206:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9e650-3800-fc43-55f0-0000493865d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/i","pattern":"[url:value = 'http://175.149.87.101:45262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f64ca02-29cf-68e8-d328-00008c380b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/bin.sh","pattern":"[url:value = 'http://74.127.168.68:33881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604db660-0341-7dc0-aacd-00000653bafd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/bin.sh","pattern":"[url:value = 'http://175.146.231.101:47081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--399d05c5-7dc9-63bf-3c78-000090db0a80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.52/got","pattern":"[url:value = 'http://213.177.179.52/got']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe79ed9-1566-58cc-b9c5-0000a7829b41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/bin.sh","pattern":"[url:value = 'http://27.156.139.177:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a4c8a9-8ca8-0faf-4ca9-0000f0471972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.83.220:36412/i","pattern":"[url:value = 'http://125.40.83.220:36412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2ed00d-8433-55d9-d9fb-0000a1401ec2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/i","pattern":"[url:value = 'http://140.237.44.234:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e13ec8f-ada4-395f-b3d2-0000686ae433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/bin.sh","pattern":"[url:value = 'http://119.116.142.166:55362/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a367c386-0475-ccea-4481-000022cf5249","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/bin.sh","pattern":"[url:value = 'http://140.237.44.234:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0855ec-d1a3-8c71-a1de-00009d994db6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/i","pattern":"[url:value = 'http://42.231.64.252:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9c90ae-3371-ae42-8599-0000af68604e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/i","pattern":"[url:value = 'http://221.15.14.56:52752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5b2cd-0344-acfb-2e6c-00006b929af3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/i","pattern":"[url:value = 'http://125.40.122.70:48495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c49e4caa-a8db-d97d-a1ec-00006be22396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/i","pattern":"[url:value = 'http://37.54.4.193:56949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5643e3-3801-771f-1c9f-0000068ec34a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/bin.sh","pattern":"[url:value = 'http://42.231.64.252:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5151065-d55c-cb52-37b3-00009d75ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/i","pattern":"[url:value = 'http://124.161.116.2:53893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27335015-5a5c-2490-07f0-0000ebf01850","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/i","pattern":"[url:value = 'http://42.4.250.38:55169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8048fbd-9a9d-594c-5d60-0000828668c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/i","pattern":"[url:value = 'http://222.141.21.106:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16059879-bbe5-0e05-507b-000066a4e2fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.201.196:57604/bin.sh","pattern":"[url:value = 'http://110.38.201.196:57604/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fee6233-18ed-a436-7fa8-0000c222d852","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/i","pattern":"[url:value = 'http://182.85.43.191:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0f37f26-3193-b044-289c-000044a5b9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/bin.sh","pattern":"[url:value = 'http://27.207.229.26:38938/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ee9ad1-b753-c1fa-525d-0000b421b727","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/i","pattern":"[url:value = 'http://74.127.168.68:33881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae95c9e-51ce-1d2e-0312-0000cc23981a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.94.20:34018/i","pattern":"[url:value = 'http://42.233.94.20:34018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5af90d5-c0fa-d277-626d-0000481c86a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.34.242.96:52648/i","pattern":"[url:value = 'http://37.34.242.96:52648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744c5dea-516a-3ecb-466b-0000207c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/i","pattern":"[url:value = 'http://175.148.111.17:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f012ba7a-3e81-2494-47a0-000040839fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/bin.sh","pattern":"[url:value = 'http://123.185.91.133:52353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--714c2b80-2750-8d57-6006-00001c59ae8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/i","pattern":"[url:value = 'http://27.156.139.177:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fa30-495c-c078-a72d-0000a1f14d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/bin.sh","pattern":"[url:value = 'http://175.148.111.17:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0973c49b-78dd-3bef-b1f0-000063aa207a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/bin.sh","pattern":"[url:value = 'http://42.4.250.38:55169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce69cc0-8aac-5cd6-54f6-0000f1445189","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/bin.sh","pattern":"[url:value = 'http://163.142.77.145:55241/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6c02d-3d0e-417b-a294-000030ac4118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/i","pattern":"[url:value = 'http://42.85.15.27:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92987675-e4a9-8861-9456-000021fd2a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/i","pattern":"[url:value = 'http://124.235.207.2:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a859b70-f2d4-a965-0110-0000afe0091a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.159.141:53442/i","pattern":"[url:value = 'http://123.189.159.141:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc3ac03-7634-e041-8a2f-0000f6ef9b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.196.33:49245/i","pattern":"[url:value = 'http://125.47.196.33:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e30d327b-7afb-c5b8-df27-00003f13ea30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:40967/bin.sh","pattern":"[url:value = 'http://210.208.110.130:40967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313d10a2-34b1-3a60-222f-00003c2092d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.219:54088/i","pattern":"[url:value = 'http://182.129.144.219:54088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0215cec-01aa-069a-ec82-00000ee96ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.227.206.54:44703/i","pattern":"[url:value = 'http://42.227.206.54:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886801a4-da73-9320-cb93-0000707568b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/i","pattern":"[url:value = 'http://119.116.142.166:55362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51504dbb-efd3-6e57-cec8-000013c134b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/bin.sh","pattern":"[url:value = 'http://110.36.91.33:35795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d45077-8427-eb9d-1fb1-00009ecd703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.239.253:51695/i","pattern":"[url:value = 'http://110.39.239.253:51695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a0ba7e-6caa-8b5b-9e58-000062e5e56f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.187.252.24:54389/i","pattern":"[url:value = 'http://60.187.252.24:54389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc50d4-1045-f5c9-a987-00004b281b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/i","pattern":"[url:value = 'http://110.37.44.119:37578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bba94-5010-8384-b83c-0000ca26ab67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/i","pattern":"[url:value = 'http://42.237.4.138:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321b5482-45f6-1f7c-b5e7-00004275dbce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/i","pattern":"[url:value = 'http://119.183.3.192:41382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74705f84-b0c2-722e-3390-00007f6cc621","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/i","pattern":"[url:value = 'http://42.179.125.40:42620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c69684b-1fba-1696-1b8c-000011f31ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.125:39910/i","pattern":"[url:value = 'http://120.84.214.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf1709f-40f5-f8c2-07e7-0000e7bc01b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/i","pattern":"[url:value = 'http://115.52.194.55:43061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b78e0c-51cf-1e76-ca75-00000d692fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/i","pattern":"[url:value = 'http://116.2.53.55:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d8dd65-2b96-8bf2-65ad-000006f4adf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/bin.sh","pattern":"[url:value = 'http://37.54.4.193:56949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65571c7-87b2-a468-f5df-00004db32841","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.184.12.198:38434/i","pattern":"[url:value = 'http://119.184.12.198:38434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2360b6-0fd9-88e8-ee45-0000f23fdda6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/i","pattern":"[url:value = 'http://116.53.20.49:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddbb64c-46d3-d336-1ce6-00002e683325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.133.4:35951/bin.sh","pattern":"[url:value = 'http://183.23.133.4:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aadb10-79b1-9555-2500-0000bc9fb0cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.149.40:50481/i","pattern":"[url:value = 'http://115.56.149.40:50481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8cdcd8-517c-6557-e8a4-0000be6f64c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/i","pattern":"[url:value = 'http://221.1.247.58:51510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0819dc-5936-3355-1098-0000e53ea82d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/i","pattern":"[url:value = 'http://196.189.35.226:40707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5648dd17-620f-9c1e-d869-0000a18e82fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.121.20:34150/bin.sh","pattern":"[url:value = 'http://115.49.121.20:34150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4b6dd-8e4a-e893-f530-000012038d51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/bin.sh","pattern":"[url:value = 'http://110.37.44.119:37578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3115c51-1468-d098-07ff-0000e5b63340","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/bin.sh","pattern":"[url:value = 'http://42.235.73.160:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537bf4a0-1af5-5167-7455-00009a099490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.94.194.151:60883/bin.sh","pattern":"[url:value = 'http://124.94.194.151:60883/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ec46d2-0ff9-d21b-9f09-000075e4e2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/bin.sh","pattern":"[url:value = 'http://221.15.14.56:52752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a4e335-f1f4-e730-7f23-0000723ea5e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.94.94:33716/i","pattern":"[url:value = 'http://42.235.94.94:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c63b73-9060-50dd-9d62-0000ec741bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.22.216:55052/i","pattern":"[url:value = 'http://110.37.22.216:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4cbaa3-75ff-4a87-0847-00004e08ed93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.168.69.141/p1.sh","pattern":"[url:value = 'http://83.168.69.141/p1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17426656-733c-78fe-910f-00003732fb26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.230.79.157:47435/bin.sh","pattern":"[url:value = 'http://115.230.79.157:47435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b42b6e2-b6a0-e78f-59a5-0000745d6869","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:32939/i","pattern":"[url:value = 'http://200.115.102.246:32939/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d0b222-3b8c-e771-671b-00009f9fc907","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/bin.sh","pattern":"[url:value = 'http://196.190.105.170:60232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1694efb3-b641-b958-3eaa-00001deabd8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.95.26:40959/bin.sh","pattern":"[url:value = 'http://163.142.95.26:40959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f9d3d72-942a-dc7f-4beb-000047555ef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/i","pattern":"[url:value = 'http://123.185.91.133:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e5199ff-47e5-2447-a7c3-0000f601211c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/i","pattern":"[url:value = 'http://182.240.11.199:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf8123a-688a-bac5-224c-000016182fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/i","pattern":"[url:value = 'http://113.239.64.220:36469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b8f358-f76f-4e82-d58b-00006cf2b3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.213.104:40820/bin.sh","pattern":"[url:value = 'http://182.126.213.104:40820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c966e0-a2f8-edef-2886-00008c8b23c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/i","pattern":"[url:value = 'http://36.70.226.107:53300/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626338d9-666c-82f6-d830-0000b50ac76a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.197.32.42:36155/i","pattern":"[url:value = 'http://115.197.32.42:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a5ec21-d4fc-6a57-eef1-0000998e822f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/bin.sh","pattern":"[url:value = 'http://182.116.113.206:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91ef35c-8d3d-8d73-8dba-0000544e1d9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.58.42.29:40746/bin.sh","pattern":"[url:value = 'http://59.58.42.29:40746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdbb74f-ce62-823a-6e71-00003535bc6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/bin.sh","pattern":"[url:value = 'http://60.21.174.229:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad626489-3615-4957-71f2-0000b8bfcbdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.78.61:33716/bin.sh","pattern":"[url:value = 'http://42.59.78.61:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627e454b-3ead-b3e8-c649-0000b20ac096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/i","pattern":"[url:value = 'http://60.21.174.229:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bb9700-b5fc-26d8-d2d2-000096c533a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_ppc","pattern":"[url:value = 'http://62.60.249.165/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ba5237-64e6-0a1d-118e-0000766bd3ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/bin.sh","pattern":"[url:value = 'http://27.215.124.43:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef3ba3-8f5a-cf21-7495-0000234fb6a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/i","pattern":"[url:value = 'http://27.215.124.43:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159de90d-cc27-5afe-b2ad-0000fdac71b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:36140/bin.sh","pattern":"[url:value = 'http://95.9.35.137:36140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38663ca-db5c-694b-33e8-0000224548ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/bin.sh","pattern":"[url:value = 'http://59.97.254.10:40659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec5c48c-5923-f7d4-aed7-000058c183d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:60655/i","pattern":"[url:value = 'http://36.88.136.194:60655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb292cb-b0cf-9088-8b3d-00000f940689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/i","pattern":"[url:value = 'http://59.97.254.10:40659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0edcd9-a0fd-5837-4295-0000bc1becb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/bin.sh","pattern":"[url:value = 'http://61.53.1.186:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753fe9bb-2090-f4a6-e933-000004a731b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/bin.sh","pattern":"[url:value = 'http://182.115.232.200:58187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--380904f4-c9c9-61c4-cd0c-00005b0be33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/i","pattern":"[url:value = 'http://61.53.1.186:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def3113b-79e2-be2d-7ea7-0000ab25cfb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/i","pattern":"[url:value = 'http://105.184.72.21:54289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac5b9f1-6918-2cb0-cc72-00009e797f0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.156.143:47860/i","pattern":"[url:value = 'http://123.132.156.143:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9869c966-3315-4936-f468-0000967a475f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/i","pattern":"[url:value = 'http://182.115.232.200:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ae2b543-38cf-423c-ee53-0000511cafa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/bin.sh","pattern":"[url:value = 'http://98.36.141.73:43074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a1e913-9c79-c85b-7512-0000c47b83ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.187.252.24:54389/bin.sh","pattern":"[url:value = 'http://60.187.252.24:54389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e07aaa-1916-e176-f73f-00005543ee9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/i","pattern":"[url:value = 'http://98.36.141.73:43074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--344d7c0c-c5a2-4a83-1c36-0000768bb729","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/bin.sh","pattern":"[url:value = 'http://115.57.228.213:55432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7082afca-ea9c-625d-437c-000042671462","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/i","pattern":"[url:value = 'http://222.142.222.21:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144358a-a983-d115-bf48-0000cb549c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/bin.sh","pattern":"[url:value = 'http://182.117.131.145:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ed7bb65-d3f9-d861-b2a3-0000a5ec7c1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/i","pattern":"[url:value = 'http://115.57.228.213:55432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5257267-c69c-5c7e-6ee0-0000efe3579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/i","pattern":"[url:value = 'http://182.117.131.145:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--385e945f-95e1-13d7-d9dc-00000a681ff6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/bin.sh","pattern":"[url:value = 'http://182.117.30.230:43216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9594d047-dc61-7285-8d50-0000f7f94c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/bin.sh","pattern":"[url:value = 'http://110.36.1.200:60120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d65fa4-906b-a8d6-986a-0000789486e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/i","pattern":"[url:value = 'http://115.55.10.187:42654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44537ca1-419f-7f1f-b70d-00005d244409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131d8f9f-1e91-d668-1bb3-0000dd24522d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f581d065-7ca4-c362-70c9-0000a1ed3a39","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c4f5c-0b16-d1a0-cb5b-0000f2309dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/Mozi.a","pattern":"[url:value = 'http://218.0.112.226:51471/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528c4962-59ca-fa97-a29a-00007a9061f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856c2f59-d816-7424-35a5-0000c103450a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/loader.sh","pattern":"[url:value = 'http://103.77.246.150/loader.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01f4bbd-5883-97a0-3a26-0000a775b306","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3589e251-7363-43b6-3071-00006124abf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.krypton-client.net/assets/krypton-free.jar","pattern":"[url:value = 'https://www.krypton-client.net/assets/krypton-free.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3da7160-8047-7ca9-0757-0000ec83fd20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar","pattern":"[url:value = 'https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae0307c5-5358-3a08-15cb-0000b55ad6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6634c1-05a1-b40f-a7f1-00007be08e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.127.232.94:58633/Mozi.m","pattern":"[url:value = 'http://111.127.232.94:58633/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914319d2-876c-b615-df52-00000eae1d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/Mozi.a","pattern":"[url:value = 'http://105.186.143.37:55447/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6024f026-ada9-e163-cffa-0000e0097af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6335dc6b-cb5b-cd28-9bd6-0000cbca2f3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/cat.sh","pattern":"[url:value = 'http://77.239.124.108/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ec555e-3acb-4856-e782-0000fc244181","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47cdca74-2d0a-2f29-e2f5-0000734e04ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/bin.sh","pattern":"[url:value = 'http://110.37.5.157:44447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8357a5bb-4e15-77de-0b3e-00001b02d827","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.30.151:34327/i","pattern":"[url:value = 'http://115.49.30.151:34327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c41ca4-0075-0a98-0031-00005079eb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/bin.sh","pattern":"[url:value = 'http://219.157.243.71:34099/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60d056c-9749-a1fa-14a2-0000b67dffa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/i","pattern":"[url:value = 'http://110.37.5.157:44447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf65246-cd03-f3d0-fb37-00005c32dc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/i","pattern":"[url:value = 'http://182.117.30.230:43216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02b7e1a-3c22-089e-4af8-0000f8c7cef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/i","pattern":"[url:value = 'http://219.157.243.71:34099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e5211e-78d3-5311-93bb-0000be31c8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/bin.sh","pattern":"[url:value = 'http://196.190.224.62:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7836a55c-9a79-d7aa-8699-00008d1a4f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/bin.sh","pattern":"[url:value = 'http://110.36.72.182:41495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f4fbb6-367f-b0e7-6ecb-0000783dc956","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/bin.sh","pattern":"[url:value = 'http://59.96.138.90:37638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2dc968-0cc0-d8ac-af3d-0000ed55ef0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/i","pattern":"[url:value = 'http://196.190.224.62:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb15362-b230-fdab-e67e-000092d5d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/gfg.sh","pattern":"[url:value = 'http://62.60.249.165/gfg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c25923-4bf2-aefd-f0ad-0000d06ef867","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm5","pattern":"[url:value = 'http://62.60.249.165/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87981665-0371-fd52-c76f-00005826e243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_m68k","pattern":"[url:value = 'http://62.60.249.165/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9d18427-9bd4-592d-41b0-0000674faa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/scanner","pattern":"[url:value = 'http://62.60.249.165/scanner']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcc380f-1a0d-8e1e-1a58-00007a6730ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm7","pattern":"[url:value = 'http://62.60.249.165/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68cb0899-93ec-3052-5929-0000c2db5789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm6","pattern":"[url:value = 'http://62.60.249.165/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a768d01-2d94-0223-d2bd-0000c2ff1dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/pandora.x86_64","pattern":"[url:value = 'http://2.26.81.46/pandora.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a1d836-e1e0-b364-d924-00003ca00032","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/i","pattern":"[url:value = 'http://42.239.179.192:41888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2688cff4-fe22-f857-2da4-0000e9ba5e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/i","pattern":"[url:value = 'http://59.96.138.90:37638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fae566d-8aca-69e6-21d6-000069f6699f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.127.19:51010/i","pattern":"[url:value = 'http://115.49.127.19:51010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1800d4d-f974-8750-47d1-0000d422a681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.186.227:47974/i","pattern":"[url:value = 'http://42.231.186.227:47974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dd9e16-b6cd-c270-49fb-0000fb7d93e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/bin.sh","pattern":"[url:value = 'http://200.115.102.2:47663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f547103e-4dc1-9fe4-21ed-000078f94ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/bin.sh","pattern":"[url:value = 'http://125.45.64.24:42706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063db189-a0ab-8b2e-e961-0000bf24b64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/i","pattern":"[url:value = 'http://125.45.64.24:42706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2f28fc-8b0d-86a9-8075-0000be245cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/bin.sh","pattern":"[url:value = 'http://115.50.101.188:34800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a70ea3-47f9-162e-08d6-0000f979bdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/i","pattern":"[url:value = 'http://113.221.8.44:56847/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baece3-05bb-1b9c-342d-000086adcdd1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/bin.sh","pattern":"[url:value = 'http://125.110.49.243:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cc01a-51b6-7b86-1fa8-00001ce5d817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/i","pattern":"[url:value = 'http://115.50.101.188:34800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c8adc0-c6de-dbe7-e706-0000ebcf5b7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/i","pattern":"[url:value = 'http://125.110.49.243:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfcf94c-020d-4c21-30cc-0000fc83d585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/i","pattern":"[url:value = 'http://1.58.182.84:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae7f9a0-d4c7-d70d-2ab0-0000d61e356b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/bin.sh","pattern":"[url:value = 'http://182.121.82.149:47697/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92dbdab0-95fc-6562-9de0-00005bfe9de5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.38.188:51859/bin.sh","pattern":"[url:value = 'http://115.51.38.188:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496383ad-b269-754e-64aa-0000e1c370be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/i","pattern":"[url:value = 'http://182.121.82.149:47697/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f18da8-9212-6736-172e-0000678a6de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.159:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e2ec56-60a4-1739-bd45-00002088283c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.159.139.237:45921/bin.sh","pattern":"[url:value = 'http://46.159.139.237:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29605262-d521-0f7c-b18b-00007a1a0447","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/i","pattern":"[url:value = 'http://182.121.231.159:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb91add-1f45-15e3-4add-000073b712c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.66.196:56771/i","pattern":"[url:value = 'http://175.174.66.196:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b249ff0-a958-4ae2-1812-00008b684471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/bin.sh","pattern":"[url:value = 'http://156.146.24.110:48908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea65ea02-c47e-e414-0133-00006ebb1f9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/bin.sh","pattern":"[url:value = 'http://39.90.150.62:51319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd1722e-c773-732b-caf1-00002a78d76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.118.104:55662/bin.sh","pattern":"[url:value = 'http://182.116.118.104:55662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833ab1b6-aee1-282f-ddc5-00000e7781c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/bin.sh","pattern":"[url:value = 'http://123.10.155.173:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64fba365-17e5-d5b1-2fad-0000152f88bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/bin.sh","pattern":"[url:value = 'http://196.189.68.239:58818/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c898fc30-c9c7-0778-6bb8-000096c01531","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/i","pattern":"[url:value = 'http://156.146.24.110:48908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--672f6326-b181-20c1-6ea3-00002db77aa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.223.172:43584/i","pattern":"[url:value = 'http://110.38.223.172:43584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89987a17-33d4-b506-6b26-0000c61b7ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/bin.sh","pattern":"[url:value = 'http://110.37.61.166:60696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d354151b-21f6-005c-af47-0000bfb67a15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/bin.sh","pattern":"[url:value = 'http://182.124.119.64:56849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e8c1a06-2c76-a764-46fd-0000a4d80c92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/i","pattern":"[url:value = 'http://39.90.150.62:51319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4647bad1-6c86-6fab-a7d8-00008eaf88ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/i","pattern":"[url:value = 'http://123.10.155.173:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc24cc34-dc64-2cce-6bda-00008c5874cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/i","pattern":"[url:value = 'http://110.37.61.166:60696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75688d70-519d-d2ae-c116-00006dc322e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/i","pattern":"[url:value = 'http://196.189.68.239:58818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824a684-9f33-44f9-73c7-0000d6140904","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.40.110:37931/i","pattern":"[url:value = 'http://221.14.40.110:37931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7d5d86-836f-44c8-3003-0000306f0cbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/i","pattern":"[url:value = 'http://182.124.119.64:56849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c39af0e-22f9-59ef-4f1c-000088724006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/bin.sh","pattern":"[url:value = 'http://222.127.53.189:49946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fef49df-8eb8-cd5f-74f4-000063ad3c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/bin.sh","pattern":"[url:value = 'http://125.40.122.70:48495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54e351f-28d1-0d32-0319-0000d0590f77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/bin.sh","pattern":"[url:value = 'http://119.116.88.117:40271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d91e4219-943b-9217-8736-0000dfc1cd6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/i","pattern":"[url:value = 'http://222.127.53.189:49946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad87e6d7-dec2-8dea-9d5c-00000748245f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.247:53078/i","pattern":"[url:value = 'http://110.186.231.247:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e164047-e6a3-4d2a-8d61-0000850e24f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.124.137:52075/i","pattern":"[url:value = 'http://61.53.124.137:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb9ff2-4659-0d04-2dec-000083374ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/i","pattern":"[url:value = 'http://175.146.231.101:47081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61fc4fc-7989-cfa1-b2cc-00006a36d003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.38.162:51120/i","pattern":"[url:value = 'http://222.139.38.162:51120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f0f8cc-aaf6-8724-a186-00000d1bb3bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/i","pattern":"[url:value = 'http://115.63.203.149:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63abdbbb-b5f9-39e2-94f1-00001eb53288","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7782139129/Tz2SZvL.exe","pattern":"[url:value = 'http://62.60.226.140/files/7782139129/Tz2SZvL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c636e713-dc65-6886-38a4-00003493a8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.159.154.179:36339/i","pattern":"[url:value = 'http://27.159.154.179:36339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aefbfad-df45-550e-60ca-0000763ec679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.24.217.164:45145/bin.sh","pattern":"[url:value = 'http://117.24.217.164:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6674e6a7-8e26-1e01-4f1f-0000770def62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/i","pattern":"[url:value = 'http://112.228.4.224:58279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b99314-9530-5508-51c3-000007889cb4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/bin.sh","pattern":"[url:value = 'http://222.138.150.155:55809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72345d8-fc84-b250-c158-00005885ebf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/bin.sh","pattern":"[url:value = 'http://108.170.136.155:37224/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6e3aad-864f-91d3-15f9-0000aa7519e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/i","pattern":"[url:value = 'http://39.78.26.151:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c864874-f978-07b3-373c-00009bf566b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/bin.sh","pattern":"[url:value = 'http://42.239.152.98:57265/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aceedf8e-187d-4bbc-a203-00005ecf6527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/i","pattern":"[url:value = 'http://222.138.150.155:55809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--468bfc83-f82b-bdf2-08a8-0000d5661428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/i","pattern":"[url:value = 'http://108.170.136.155:37224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a00a2d-d0b0-d0d1-9cb6-0000e8dadb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/i","pattern":"[url:value = 'http://42.239.152.98:57265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7da6ba8-c6d9-2fcc-c74e-0000c312c017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/bin.sh","pattern":"[url:value = 'http://112.228.4.224:58279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e30f3-e382-2324-96e2-00001061c278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/i","pattern":"[url:value = 'http://182.112.13.24:36195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc62cef-7165-cd2f-8050-00001dfede47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/bin.sh","pattern":"[url:value = 'http://59.97.249.15:59820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b52e8c4-9a79-33cd-436c-000071123215","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/i","pattern":"[url:value = 'http://59.97.249.15:59820/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5813af9-bc3a-62ff-23cb-0000f17560cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/bin.sh","pattern":"[url:value = 'http://42.179.238.52:48748/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1930b0e-c489-4b1a-e7e5-0000741a7350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/bin.sh","pattern":"[url:value = 'http://72.255.30.244:42024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a625143-ca73-c2e9-75bd-000086b61a7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/bin.sh","pattern":"[url:value = 'http://123.133.101.151:58126/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df3ab0e-60ac-41a2-a1e2-000097afae4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/dp.sh","pattern":"[url:value = 'http://191.44.112.89:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2929244-7bde-a088-0ed3-0000de937ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x86","pattern":"[url:value = 'http://191.44.112.89:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1336063e-3359-0f0d-8394-00004363bf38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc440","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c687d3b9-f873-eddc-db09-0000e73000a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mips","pattern":"[url:value = 'http://191.44.112.89:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f8f993-26d4-d1a5-c393-00007d3b63b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm6","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf1a829-d327-898b-5508-00006f8ecc56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm5","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7241dd-bb17-95d7-8527-0000264e8d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sh4","pattern":"[url:value = 'http://191.44.112.89:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1397891f-9e68-a43a-76a7-000067268415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i486","pattern":"[url:value = 'http://191.44.112.89:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ffc905-7e03-4567-7b6f-0000c58704dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm7","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf698bf-5d7e-127a-cffb-0000d732ab33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm4","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--378af076-4883-84ae-5bf4-0000bddbdaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mipsel","pattern":"[url:value = 'http://191.44.112.89:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f20a38a-54aa-5aca-1f65-0000a6901495","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21fdee6-6f17-227c-4b57-0000cbaa0c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x64","pattern":"[url:value = 'http://191.44.112.89:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10135d71-f046-2479-bd35-00002aee251e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i686","pattern":"[url:value = 'http://191.44.112.89:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aabe76f-4d67-c57e-5004-0000e7c6d672","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.m68k","pattern":"[url:value = 'http://191.44.112.89:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42fc9a64-208a-332e-288c-0000840dfab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sparc","pattern":"[url:value = 'http://191.44.112.89:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5ab6bb-b04e-30ec-f0aa-0000045ce5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/bin.sh","pattern":"[url:value = 'http://183.188.204.211:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9fe53e-b7df-51df-a76d-0000993a0475","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/i","pattern":"[url:value = 'http://42.179.238.52:48748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--221248f2-77e8-5785-1815-0000892f5677","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/JutrvoService.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/JutrvoService.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e45969ca-fde2-9f1d-b4d0-0000cec66f62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/i","pattern":"[url:value = 'http://123.133.101.151:58126/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69231027-d8ad-e748-a3b0-000021d17681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/i","pattern":"[url:value = 'http://183.188.204.211:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f588313-5590-3a59-b108-00009f084a96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.100.231:50864/bin.sh","pattern":"[url:value = 'http://27.37.100.231:50864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e8e993-cdff-0dc8-b61d-00002a4e61a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/bin.sh","pattern":"[url:value = 'http://115.55.114.89:40814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d59f910-0236-a8ce-7cf2-00003f995547","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:54748/i","pattern":"[url:value = 'http://110.36.86.83:54748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ace7db-2141-7023-579f-0000bbf515a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.30:42974/i","pattern":"[url:value = 'http://59.96.142.30:42974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3339e01e-3da3-6b79-b6f5-0000e3b5b003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/i","pattern":"[url:value = 'http://115.55.114.89:40814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d235a3db-3e75-b792-08c1-0000a633b4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/bin.sh","pattern":"[url:value = 'http://116.248.123.33:49271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faca328f-b099-c762-945a-000088de6636","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.104:47860/i","pattern":"[url:value = 'http://112.242.56.104:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360bbd8f-ba94-29a0-9fc9-0000d8a61058","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/bin.sh","pattern":"[url:value = 'http://124.131.148.213:44472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7739dac5-8220-1efd-8744-000047c0b4ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/i","pattern":"[url:value = 'http://119.116.88.117:40271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61767ce7-c8f4-8007-12b4-000062376119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/bin.sh","pattern":"[url:value = 'http://42.224.248.160:54570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70aaf821-a21d-621c-2885-0000279f484a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/i","pattern":"[url:value = 'http://116.248.123.33:49271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c6080a-11fd-c48d-4054-0000433f2da5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/i","pattern":"[url:value = 'http://124.131.148.213:44472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63f8a4-5bec-655e-9efa-000022d9eb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/i","pattern":"[url:value = 'http://222.137.19.202:54735/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--855efb82-b1f9-84bc-2592-00006d5cce40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.239.201:47209/i","pattern":"[url:value = 'http://123.12.239.201:47209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d6037b1-5541-9255-754f-0000ed5f10f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/i","pattern":"[url:value = 'http://42.224.248.160:54570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60370ee7-9c67-45ac-0db9-00007ee50b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/bin.sh","pattern":"[url:value = 'http://42.239.188.2:43535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56104ee3-8245-ee21-e33f-00002c9f59ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/i","pattern":"[url:value = 'http://115.52.190.59:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d3d4bf1-1dec-2dce-c4aa-00000b9586bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/bin.sh","pattern":"[url:value = 'http://112.198.193.5:33801/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6321193-7076-a8d9-dcc8-0000902d3171","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad4faec-e283-1a26-228f-00003b63733a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cca54e-a6bb-e00f-bb18-0000cfd02396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/bin/support.client.exe","pattern":"[url:value = 'http://77.83.39.9/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f702dc6-0230-7139-a60b-0000117b84e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.142/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f9af0e-951a-a5ae-f69e-00001316823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9611308f-8294-c437-ae4f-0000abe90f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39018ba-ff02-f5ac-cb8d-00004eab35a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--155b2292-9e7e-c8e0-2d43-000051eae779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/i","pattern":"[url:value = 'http://42.239.188.2:43535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319e3f42-3cbc-c692-9244-0000c801884e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/i","pattern":"[url:value = 'http://112.198.193.5:33801/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17770e1-fefe-c2cd-a7fc-0000bd0862e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/i","pattern":"[url:value = 'http://182.118.246.94:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543701ab-2ffc-5231-ea0c-000080fd6335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/bin.sh","pattern":"[url:value = 'http://112.239.122.112:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e9c8-0198-05b4-d091-0000b61e283e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.43.152:53485/i","pattern":"[url:value = 'http://182.113.43.152:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60e58e-6973-9557-02fb-00007166159b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/bin.sh","pattern":"[url:value = 'http://222.138.182.37:37037/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ac8c76-71de-bfd8-80ab-0000ec5c69ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/i","pattern":"[url:value = 'http://112.239.122.112:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6159c63-7801-b01f-9441-00000ece118c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.238/s.ps1","pattern":"[url:value = 'http://94.154.32.238/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dc707b-94c6-ecf8-82ce-00000c8825d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online/asset/update.dat","pattern":"[url:value = 'http://newstan.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6847d0-1db7-5588-e6e4-000085ae40e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://171.213.150.35:35745/i","pattern":"[url:value = 'http://171.213.150.35:35745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7820b6-1937-87db-8a4b-0000feff1aea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.161:44359/i","pattern":"[url:value = 'http://182.114.255.161:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a101cc-e0a1-6f18-69aa-0000d40988f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/i","pattern":"[url:value = 'http://222.138.182.37:37037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd86a203-2c64-5ca9-211a-00006eda0374","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/bin.sh","pattern":"[url:value = 'http://221.202.206.125:41411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1922b7-ec27-aac5-ef68-0000f7be43e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/bin.sh","pattern":"[url:value = 'http://115.55.130.218:47315/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dae89c3-6ac8-1072-4b9e-0000bcb0c0c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/bin.sh","pattern":"[url:value = 'http://114.227.49.3:38196/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec032b81-c003-69d3-cfe5-0000fbf89826","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/i","pattern":"[url:value = 'http://114.227.49.3:38196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f99478-858f-efea-333d-00007fd879f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/bin.sh","pattern":"[url:value = 'http://125.44.181.178:58549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35528b31-a2d9-d180-be74-00008ccdbb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/i","pattern":"[url:value = 'http://221.202.206.125:41411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782d68e4-2b07-ede6-8134-0000b2668070","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/bin.sh","pattern":"[url:value = 'http://218.91.14.121:32924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0b0b44-967f-4cf7-6028-0000f7c3600a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/i","pattern":"[url:value = 'http://125.44.181.178:58549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f36b7b9d-b1c3-df64-34d9-000017167613","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/i","pattern":"[url:value = 'http://218.91.14.121:32924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccbc1a2-04d2-c2e6-33c8-0000f0dd319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/i","pattern":"[url:value = 'http://116.140.186.83:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366ff72c-17eb-94a7-6491-000043d1f1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/i","pattern":"[url:value = 'http://42.59.204.16:37885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81cc137-f701-a93b-9f4e-000013b20c23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.184.118:41931/i","pattern":"[url:value = 'http://119.165.184.118:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60848353-d602-e07e-cc51-000060f75996","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.127:40959/i","pattern":"[url:value = 'http://120.84.214.127:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4322f164-bccd-39fa-0e50-0000636fb709","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/bin.sh","pattern":"[url:value = 'http://123.188.223.103:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184b38eb-edd7-57f6-662c-0000a7505e14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.223:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f4cac8-556d-a15d-5742-0000e00f8b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/bin.sh","pattern":"[url:value = 'http://218.29.28.21:33666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6481f14-c7ff-8fa2-b52d-00005a048998","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.25.33:32877/i","pattern":"[url:value = 'http://110.36.25.33:32877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b327f6-7b52-7f30-c404-0000cd921ad6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/bin.sh","pattern":"[url:value = 'http://222.139.69.87:33578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8aab24c-d709-f755-c97b-00006d06b76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/i","pattern":"[url:value = 'http://125.42.65.22:32872/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7fd3c57-04fa-0289-2644-00002d7a8a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0851d22-73c1-32e3-0ca6-0000ad01cc33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d47a7b4e-8ad5-650a-5fcd-0000f269ddaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload.exe","pattern":"[url:value = 'http://newstan.online:8443/payload.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8816d7-5a89-e402-2f73-0000834bd874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1db98da-a161-4055-d067-0000dcf1fef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4bd89774939d.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4bd89774939d.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e308c965-b3d7-9b4b-d8e4-0000ae89a8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4b870df50ce6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4b870df50ce6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140a958-7124-4e68-5d50-00009fc07cb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux.exe","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ef1ce9-eab0-60c6-724a-000084870ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db7d9cbf-0b3c-b4ce-a04f-0000c93434cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7182b6e8e7b6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7182b6e8e7b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae4ae7e-51f0-22ef-5af6-00003dfab738","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9cea2d96337e.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9cea2d96337e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928868d-132a-4ac7-f18f-000045f75a03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7333cef1df5b.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7333cef1df5b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6872fe71-0031-de6a-7857-000095719b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7296bb21486f.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7296bb21486f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda619a0-b1da-fad8-e171-000089bbb7c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7441f57b1a78.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7441f57b1a78.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3fd13f-effa-6339-c4f2-0000f5043e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9c2f86cabdb2.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9c2f86cabdb2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0c3a24-e06a-0e22-b4ce-0000e72d391b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7a9ae6f1d608.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7a9ae6f1d608.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e8ca8e-0435-d181-81a4-00008019269f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb73a84c0c2684.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb73a84c0c2684.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b7de9d-1e73-c085-745e-00004b03a075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7296bb21486f.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7296bb21486f.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd25f24f-6cea-d34e-7877-0000e23ed8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cef6566cc70.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cef6566cc70.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc741b51-6fb8-0ae2-7184-000067567f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7ca62cfb04e6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7ca62cfb04e6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c4ed10-bbb1-2fca-7624-00009f896da7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80faf1d3-8174-ed45-75db-00002b7605b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2dea62-ddbd-d981-3c9e-00005e6b1d68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb73a84c0c2684.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb73a84c0c2684.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b8bc53-db47-bd16-2945-000017460f38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d615a80d-cd4c-dd79-d9fc-0000f7ad0421","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb9cea2d96337e.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb9cea2d96337e.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2ad36a-6452-af62-acf8-0000c0985409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d062cca7589.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d062cca7589.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363394c-694b-1f2d-13ab-000057c98c31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7441f57b1a78.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7441f57b1a78.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa49ecc-e886-21f8-5db7-000052baea50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7eda661-6230-ec8a-7daa-00009b8561f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7333cef1df5b.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7333cef1df5b.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07db468-5b1b-d742-4cce-00001cafb9fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb72c503457787.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb72c503457787.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb89484-4c95-7f23-8ea0-0000c2dd820c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb72c503457787.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb72c503457787.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd20b8-c1f6-f607-90e6-00001f6f01b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/i","pattern":"[url:value = 'http://175.107.209.223:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f7387e-d361-64ca-cf51-00009e5fdbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d98c1e-622c-af6b-1fa2-00008af77695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/i","pattern":"[url:value = 'http://218.29.28.21:33666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea00095-ad89-bb1b-9a00-0000d9789c83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/i","pattern":"[url:value = 'http://222.139.69.87:33578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eab563e-2228-b834-15f9-000077660d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.32/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e378ad53-41c8-15c0-4f62-0000dffbee0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7441fd07-aea5-4333-a1f6-000051f0bda9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.37.245:40790/i","pattern":"[url:value = 'http://113.221.37.245:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9cb079-d3d0-336d-f2e8-0000b22a674a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==","pattern":"[url:value = 'https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb6d4a5-f039-e405-be07-0000ec93cc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.10.7:39430/i","pattern":"[url:value = 'http://123.11.10.7:39430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55fef21-4b53-3843-8710-0000efcbcaca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.127:51731/i","pattern":"[url:value = 'http://115.57.233.127:51731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312341f3-4089-be19-9ece-000008f18720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/i","pattern":"[url:value = 'http://46.236.65.23:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1ca74f-efb7-7cef-0a75-00007af7f9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/bin.sh","pattern":"[url:value = 'http://42.237.4.138:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb57556-bc20-41dd-e29a-00007504ddf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/bin.sh","pattern":"[url:value = 'http://222.142.222.21:33146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd20d7b-e999-7b7a-8cb6-000071a10f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/i","pattern":"[url:value = 'http://182.113.202.0:42578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df95a2c3-4d29-24d1-7c04-00007bcbd4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/i","pattern":"[url:value = 'http://83.219.1.198:51018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72eef1c4-c1b6-7721-92c9-000028c564c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/bin.sh","pattern":"[url:value = 'http://115.52.190.59:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887ae7b9-908f-5851-0cb7-00009f167db0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/i","pattern":"[url:value = 'http://203.2.151.15:42459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb4da69-e529-11b3-e9e3-000004abeffd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/bin.sh","pattern":"[url:value = 'http://120.28.194.92:40193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fcd0b9-bdda-eb5f-6277-00000bcafb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/bin.sh","pattern":"[url:value = 'http://46.236.65.23:41753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddb539e-a1c6-f181-0afd-0000836cd5a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/i","pattern":"[url:value = 'http://77.236.74.65:48279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd4a83bd-0405-2387-3f28-0000bf574b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/i","pattern":"[url:value = 'http://222.138.114.112:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddb19ef-281b-80fb-bce9-0000dcc9703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.137.250.247:56159/bin.sh","pattern":"[url:value = 'http://38.137.250.247:56159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48de9e99-2077-5f62-50cf-0000881d9ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/i","pattern":"[url:value = 'http://42.87.221.249:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a9bade-4e8c-0cbb-3c60-0000c2410039","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/i","pattern":"[url:value = 'http://103.179.240.227:36804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649b3a2e-97a6-d30a-e705-000084d1ba95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/i","pattern":"[url:value = 'http://103.80.57.126:60997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3c7a1e-564f-73be-10e9-000018712693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/i","pattern":"[url:value = 'http://46.236.65.163:51558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72494f78-ce05-3294-7b38-0000d675d6ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/bin.sh","pattern":"[url:value = 'http://193.163.187.213:45749/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8406fe-cb57-ec9c-4eef-0000f7a3fba5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.79.142:44907/i","pattern":"[url:value = 'http://42.226.79.142:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ff6878-9fac-5d94-5765-00002eb27280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/bin.sh","pattern":"[url:value = 'http://115.49.73.86:41886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f03266d-374e-d0f3-0868-0000eeaecf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/bin.sh","pattern":"[url:value = 'http://222.185.199.96:32826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf04e17a-f5bb-c37c-f79d-0000ed18ae23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/i","pattern":"[url:value = 'http://123.5.153.69:57210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446c759f-5ce8-89d8-098c-000014751ae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/i","pattern":"[url:value = 'http://182.124.162.58:48222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--795c24eb-307e-c33f-405e-0000c2f486ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/i","pattern":"[url:value = 'http://115.49.150.183:34026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9d06dc-0dfe-4bdb-1b36-0000a801c1ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/i","pattern":"[url:value = 'http://61.53.205.176:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16de9fac-4488-feb2-e926-0000b3a688ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/i","pattern":"[url:value = 'http://110.39.227.44:34974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b0ab10-1e99-37dc-236b-00006ec230f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/i","pattern":"[url:value = 'http://39.73.126.17:41462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd17a434-8923-26d6-3544-00009eacf405","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/i","pattern":"[url:value = 'http://42.59.237.57:55244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a917743e-e270-be3b-001d-00001203b4a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/i","pattern":"[url:value = 'http://42.59.235.112:57254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82744e02-a7b7-1276-9126-0000ce6046ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/bin.sh","pattern":"[url:value = 'http://222.138.114.112:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65537ac6-1e5d-fbdf-4435-000046e63e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.9.103:49699/i","pattern":"[url:value = 'http://221.15.9.103:49699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842ceb68-c25f-0aa6-09a9-00003de09976","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/i","pattern":"[url:value = 'http://61.52.14.231:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50122219-139f-f5bc-7af1-0000b38aea69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/bin.sh","pattern":"[url:value = 'http://61.52.14.231:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08fccc19-484d-7c08-4148-000034c5fb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.228.213:50246/i","pattern":"[url:value = 'http://125.41.228.213:50246/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d232fe3f-065c-c9b0-bad3-000099a97a62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.17.30:34226/i","pattern":"[url:value = 'http://115.194.17.30:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda53341-7561-e6af-5f84-0000d7f990b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/i","pattern":"[url:value = 'http://101.109.201.128:44332/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16455950-82d8-d709-e693-0000f505380a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/i","pattern":"[url:value = 'http://193.163.187.213:45749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2239da29-ef8e-7018-02fc-0000e7389d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/bin.sh","pattern":"[url:value = 'http://83.219.1.198:51018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0edfe769-5e57-6497-9798-0000b4231f61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/bin.sh","pattern":"[url:value = 'http://125.42.65.22:32872/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88f1d8-d430-43c3-e7f5-00009928fa16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.240:49683/i","pattern":"[url:value = 'http://115.55.130.240:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba13dbaf-d7a6-15a8-4d93-0000c0200243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/i","pattern":"[url:value = 'http://115.50.224.108:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4303eef3-25ba-ffd6-21d4-00001a0007bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/bin.sh","pattern":"[url:value = 'http://39.73.126.17:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca2c9135-23fa-331c-3567-00008c54b5a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/bin.sh","pattern":"[url:value = 'http://77.236.74.65:48279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5638541-9d63-fcf4-95cc-00001761fe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/i","pattern":"[url:value = 'http://115.58.88.232:50270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c216beb8-f79d-9911-eb28-0000b1a9dca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/bin.sh","pattern":"[url:value = 'http://113.221.8.44:56847/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ccd98a-b7f8-7e84-17dd-0000dafc2bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/bin.sh","pattern":"[url:value = 'http://175.149.219.183:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--576b0b2b-fe02-edce-3692-0000f9fa8de3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/i","pattern":"[url:value = 'http://125.41.247.59:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a75001c-93f3-7a08-1b92-0000c1259a23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/i","pattern":"[url:value = 'http://124.131.128.79:53693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac0be52-0b4c-574f-5793-00007a6cfe3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/i","pattern":"[url:value = 'http://27.37.229.199:49596/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed854d-be17-d1b7-de74-0000147ba914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/bin.sh","pattern":"[url:value = 'http://123.161.90.29:49111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d062cb40-6fc3-ca85-55c2-00000f5ec64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/bin.sh","pattern":"[url:value = 'http://27.215.84.16:59065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0650de63-495f-33d3-1209-0000ca3789b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/i","pattern":"[url:value = 'http://42.85.169.225:40832/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2795474d-5a26-52ae-229d-0000b369e513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/bin.sh","pattern":"[url:value = 'http://110.36.86.0:40490/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ded14ef-5f51-0ec1-ea64-0000a6dd9bfe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/bin.sh","pattern":"[url:value = 'http://110.39.227.44:34974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae20a592-869b-5010-726c-0000e2ff41fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/bin.sh","pattern":"[url:value = 'http://103.179.240.227:36804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dff79ae-9cca-2120-9831-0000f46f187b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/i","pattern":"[url:value = 'http://222.185.199.96:32826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--081645bc-3460-ef1a-3a74-000041e84cc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/i","pattern":"[url:value = 'http://115.55.130.218:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fe57a3-275b-f840-6609-000080b7b28a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/bin.sh","pattern":"[url:value = 'http://115.50.224.108:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89c9dfa5-0b45-bff7-12ee-0000cfdd7968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/bin.sh","pattern":"[url:value = 'http://103.249.199.3:36611/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed72677-6176-2f45-140a-00007ea1ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/bin.sh","pattern":"[url:value = 'http://124.131.128.79:53693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73991ded-208f-3a6a-7762-000023f341d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/bin.sh","pattern":"[url:value = 'http://42.86.137.34:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa631fcc-0506-2dd8-16fc-00007522140c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/i","pattern":"[url:value = 'http://219.155.73.196:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73acf7e6-1282-7c97-bf14-0000dd847176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/Mozi.m","pattern":"[url:value = 'http://175.174.68.59:47203/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87264a75-deb8-b0fc-ac4c-00007ed7cde0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/bin.sh","pattern":"[url:value = 'http://103.80.57.126:60997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5858ab08-fa01-4377-2686-0000d226a8aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/i","pattern":"[url:value = 'http://182.126.84.239:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531e81a8-6e6c-8497-32d9-0000fb8add4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/bin.sh","pattern":"[url:value = 'http://175.149.88.173:35767/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc6b441-423f-8f16-334a-00007780ae7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.138:40709/i","pattern":"[url:value = 'http://182.114.192.138:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9c26510-542e-cae6-7d12-000085b0da09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.94:60512/bin.sh","pattern":"[url:value = 'http://27.37.102.94:60512/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fda7ca4-078c-8a0c-07a8-0000cf8bbd3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/i","pattern":"[url:value = 'http://27.37.102.10:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5d44ec-7a86-077f-c05b-0000d541cb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/i","pattern":"[url:value = 'http://123.11.72.175:34884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152d3c-17ce-ab75-c61b-000094f0e7f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/bin.sh","pattern":"[url:value = 'http://123.11.72.175:34884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8625d079-6c37-4508-9b31-0000656a07af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/i","pattern":"[url:value = 'http://222.137.152.55:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26d5f12-982c-21f7-440d-0000e5f46e1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/i","pattern":"[url:value = 'http://202.107.0.250:55295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f9ca26d-218d-aadc-b35d-0000d1f11ca6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/bin.sh","pattern":"[url:value = 'http://27.37.102.10:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fe4c21-238c-a208-bf50-0000cb30b62d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/bin.sh","pattern":"[url:value = 'http://125.41.247.59:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad5d646-3bb8-edf9-ad85-0000a1baf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/bin.sh","pattern":"[url:value = 'http://203.2.151.15:42459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf52c1e-600a-dbb0-7304-00001628a604","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.80.162:54439/i","pattern":"[url:value = 'http://110.36.80.162:54439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4147f6-4342-128c-fc99-0000fbdce224","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/bin.sh","pattern":"[url:value = 'http://182.126.84.239:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502afb46-5be1-bf44-f464-0000ac92452c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.134.160.73:39191/i","pattern":"[url:value = 'http://183.134.160.73:39191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e56d3b-ed18-f600-0c79-0000dc7b4cf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/i","pattern":"[url:value = 'http://219.155.171.135:36711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6052e51-7ed9-e6d4-fee1-0000e265fc3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/bin.sh","pattern":"[url:value = 'http://219.155.171.135:36711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a723511-c5b6-3991-fc71-0000f5a85ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/bin.sh","pattern":"[url:value = 'http://175.174.41.135:59524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31410a70-ea63-64e7-05e3-00005bb3b443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/bin.sh","pattern":"[url:value = 'http://182.121.83.219:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74ed1eb-86cd-10c0-0df4-00005886e2f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/i","pattern":"[url:value = 'http://163.182.97.242:4040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c926b64-8cc8-03ce-152a-000023a0662a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.113.196.55:38024/i","pattern":"[url:value = 'http://222.113.196.55:38024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c42fd0-1448-785d-e16d-0000f7ea4efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/i","pattern":"[url:value = 'http://103.249.199.3:36611/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b134db11-2a95-59a8-bef8-0000aaea6439","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/i","pattern":"[url:value = 'http://115.49.73.86:41886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37727a46-72d2-60f2-a874-0000ebba3587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/i","pattern":"[url:value = 'http://175.9.165.81:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e307e147-643f-c33e-56a5-000058a28906","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/bin.sh","pattern":"[url:value = 'http://163.182.97.242:4040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b3683b-41aa-b147-c615-000023044c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/i","pattern":"[url:value = 'http://123.161.90.29:49111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d5cb7c-d766-4a54-3d9e-0000772afcc6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/bin.sh","pattern":"[url:value = 'http://175.9.165.81:50484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0eedcc3-2617-eb7e-1db9-00000da0283b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/bin.sh","pattern":"[url:value = 'http://222.141.21.106:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1167be-97ba-3c83-89e4-00007bba4b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/bin.sh","pattern":"[url:value = 'http://115.52.194.55:43061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90edea43-fc1d-7feb-f50c-0000fc80f304","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.200.77:49632/i","pattern":"[url:value = 'http://42.227.200.77:49632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0335d17-7675-ec9a-f5a6-00005ddab2f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.124:33142/bin.sh","pattern":"[url:value = 'http://59.96.142.124:33142/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0830bdb6-a373-15f0-f1ef-00004217275d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/bin.sh","pattern":"[url:value = 'http://182.121.244.13:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993f738f-9499-dc87-86ba-0000ac6b1e82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/i","pattern":"[url:value = 'http://175.149.88.173:35767/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175fba86-2a03-4ec9-0924-0000f43028dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/bin.sh","pattern":"[url:value = 'http://222.137.152.55:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d508a8e4-4fa3-50e4-70bc-0000329883d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/i","pattern":"[url:value = 'http://182.121.83.219:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a834a6-3ed8-5bfc-25a1-00004aa4bcf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/bin.sh","pattern":"[url:value = 'http://42.87.221.249:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aba516b-cc76-34de-efb7-000038e057e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/bin.sh","pattern":"[url:value = 'http://182.240.11.199:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e856ab28-d16a-affb-db91-00000dd3c3fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/bin.sh","pattern":"[url:value = 'http://61.53.205.176:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5987ab48-e908-e97f-b35b-0000b4d0ea2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/bin.sh","pattern":"[url:value = 'http://124.235.207.2:39666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4353af-b353-d643-5cf6-0000581141d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/bin.sh","pattern":"[url:value = 'http://101.109.201.128:44332/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4697066-a44a-a734-fbd2-0000a37d5282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/bin.sh","pattern":"[url:value = 'http://42.85.169.225:40832/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d817f27-1158-8a24-fc51-0000fb6cc379","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/bin.sh","pattern":"[url:value = 'http://203.177.28.149:50084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f788a748-7021-97e1-5a99-000088dab81d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/i","pattern":"[url:value = 'http://175.174.41.135:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e3e8a2-cd79-2e9d-1624-0000812e06af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.113.189.94:60395/i","pattern":"[url:value = 'http://125.113.189.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d99e1ab-d382-62f8-0d31-0000efed1e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/bin.sh","pattern":"[url:value = 'http://115.49.150.183:34026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1113298-f1a9-6db4-b62c-000080b6d894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/i","pattern":"[url:value = 'http://203.177.28.149:50084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd91e9f-4511-a18e-d18f-00002977ef20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/bin.sh","pattern":"[url:value = 'http://202.107.0.250:55295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3ce763-2bf5-77e5-d2fa-000080b72925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/bin.sh","pattern":"[url:value = 'http://42.179.125.40:42620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef82e744-07e4-e941-d909-0000916ce77a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/i","pattern":"[url:value = 'http://182.117.68.176:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e971829-42b5-cd1c-b6a4-00002f9aa651","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.252.55:54907/i","pattern":"[url:value = 'http://112.248.252.55:54907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aa27b96-f7d8-34cb-2027-0000f9fbe33f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.218.29:55917/i","pattern":"[url:value = 'http://61.53.218.29:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a20d802-4548-51ac-cac2-0000857dfe85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/bin.sh","pattern":"[url:value = 'http://123.14.57.190:46376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a43f114-eb9c-a7a8-c0b2-00000d2b8eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/i","pattern":"[url:value = 'http://123.14.57.190:46376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d8cd0c-b328-6e40-365b-00000b304f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/bin.sh","pattern":"[url:value = 'http://115.55.10.187:42654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae02b62-7e6c-f661-e892-0000695f452b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/i","pattern":"[url:value = 'http://27.215.84.16:59065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf9624d-d9c0-1130-805f-00001f9e18ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/bin.sh","pattern":"[url:value = 'http://182.124.162.58:48222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b804c6-8300-b789-458b-0000c0825196","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87529139-1033-f43d-e475-000032f310b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/i","pattern":"[url:value = 'http://113.228.208.46:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d931bca-2a35-f25e-1988-0000a87e5f31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/bin.sh","pattern":"[url:value = 'http://222.137.19.202:54735/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97defab5-d35c-4264-14a5-0000b8db8f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/GpzbWsi.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/GpzbWsi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd298f9-72dd-e0f2-24ee-00009f26be10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/1.sh","pattern":"[url:value = 'http://198.144.179.82/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83683f6-9da2-15a4-893b-00009a2b1415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/i","pattern":"[url:value = 'http://42.230.30.16:36416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5c8747-2912-8590-ae70-000097bccd86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/i","pattern":"[url:value = 'http://115.48.146.252:57987/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df510a4-5e99-195c-2b92-0000ad12a4ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/bin.sh","pattern":"[url:value = 'http://182.124.9.99:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a038d869-df39-974c-bb21-0000d2934228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/bin.sh","pattern":"[url:value = 'http://39.90.149.223:46931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fefd960-1fe0-bc50-97c3-0000dcee0f0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/i","pattern":"[url:value = 'http://61.53.202.74:59244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba346a1-0dfc-c1e1-8ae9-0000c53068c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f84d3e4-8d46-8490-0ea5-00001a5dec08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe","pattern":"[url:value = 'https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e573551-4dbb-a4e2-1bb6-0000ce3607c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv7l","pattern":"[url:value = 'http://31.77.227.119/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3524d0-fc81-b992-4473-0000dea455c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/cat.sh","pattern":"[url:value = 'http://31.77.227.119/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b279dfca-53e2-c207-daac-0000473746c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85efcd91-f263-09e7-abeb-00004646c106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.arm7","pattern":"[url:value = 'http://31.77.227.115/meower.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ccc87-1f68-0395-c652-00008efa0fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/Services.apk","pattern":"[url:value = 'http://31.77.227.115/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e691f713-0f71-e0f7-46b6-000036e38cc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.so","pattern":"[url:value = 'http://31.77.227.115/meower.so']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffeedd9-ba15-2d95-5601-0000c7fb1984","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b059bf4f-0f63-7209-2872-0000fe5ad4c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6349de11-119f-4a07-445e-0000f9299d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.248/sysorbit.apk","pattern":"[url:value = 'http://176.65.139.248/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1f63e7-fa9e-cbcf-541a-00009b03b606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.rxx.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.rxx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fad144-74f0-8b99-2393-000046ae8fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.214:53741/Mozi.m","pattern":"[url:value = 'http://59.96.138.214:53741/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--834a920d-6a46-8189-96aa-000029d09668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/deploy.sh","pattern":"[url:value = 'http://43.228.157.73/deploy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f71a162-c941-f61f-6ac1-00002f3b969d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/gg11","pattern":"[url:value = 'http://191.44.112.89:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3250fd-fb77-e3f6-001c-00003b06a9c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/i","pattern":"[url:value = 'http://39.90.149.223:46931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8d174e-2faf-4e72-83a6-000018f89e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/bin.sh","pattern":"[url:value = 'http://125.44.196.40:38436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646eeae3-af5f-4453-2ad5-000051497c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/bin.sh","pattern":"[url:value = 'http://220.192.252.142:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bef10-2916-7124-7793-0000ebd6b12a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/i","pattern":"[url:value = 'http://27.194.27.62:59829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248efb6e-c03a-5947-d720-00004b7735f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/bin.sh","pattern":"[url:value = 'http://42.239.150.62:42943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8372b00b-addc-8265-c16a-0000a2ed1464","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.185:50547/i","pattern":"[url:value = 'http://115.48.149.185:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05472eb3-dbf2-c325-d14e-0000d0d1d8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://89.189.181.54:47685/i","pattern":"[url:value = 'http://89.189.181.54:47685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f353f0fd-2ab9-ed91-2241-0000afb4442d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/i","pattern":"[url:value = 'http://123.4.203.194:35564/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c051c2ed-4118-45b5-d4aa-0000b0ecd233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/bin.sh","pattern":"[url:value = 'http://112.239.102.100:56270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87505a8e-a761-65f2-bfdb-000034e29789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/i","pattern":"[url:value = 'http://42.239.150.62:42943/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e03a0d-8d99-ed9c-ac35-0000790dea2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/i","pattern":"[url:value = 'http://112.239.102.100:56270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2900b718-04f5-ec90-8f5d-00004dc78f30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/bin.sh","pattern":"[url:value = 'http://182.113.202.0:42578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eaca7a-71b0-e02b-659d-0000dcda9c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.202.62:60041/i","pattern":"[url:value = 'http://105.186.202.62:60041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcdbeb96-2b39-3e82-7016-0000a163a06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://funneldiy.com/Installer_c2cea6.msi","pattern":"[url:value = 'https://funneldiy.com/Installer_c2cea6.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1e570a-3b24-07cb-ba40-0000f6143602","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/bin.sh","pattern":"[url:value = 'http://182.123.211.251:59971/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a5429-f498-1675-1c53-000096831839","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.67:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddd5de4-a563-a4d9-fd1a-0000adeab0af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/i","pattern":"[url:value = 'http://182.117.10.67:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f070a126-95d9-0d88-34c1-00002faf8398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/i","pattern":"[url:value = 'http://125.44.196.40:38436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfef20e8-739e-ca4d-1ed7-0000f6b61f22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/i","pattern":"[url:value = 'http://182.123.211.251:59971/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71bd64e9-70d5-7a6a-9cbe-0000e604cf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/i","pattern":"[url:value = 'http://120.28.194.92:40193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1a9da2-5952-70fa-669a-00001707c1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/bin.sh","pattern":"[url:value = 'http://182.117.68.176:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cf2e57-4daf-d236-ae17-00009d59ab12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Jz4KcAs.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Jz4KcAs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcb351-7d00-c903-0d22-0000e2eb42be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/bin.sh","pattern":"[url:value = 'http://125.43.23.92:55029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f926b-7b40-6ae8-57be-00007e8b84ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm5","pattern":"[url:value = 'http://94.154.43.146/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eaf0cca-d884-a2a5-47fc-00008292a753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/x86_64","pattern":"[url:value = 'http://94.154.43.146/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bb2f32-5565-c5a9-f1eb-00009d362658","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mpsl","pattern":"[url:value = 'http://94.154.43.146/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d469e9fb-09bd-15f8-7336-0000f6354812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mips","pattern":"[url:value = 'http://94.154.43.146/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7716c3d1-5637-5cbd-3d5e-00006c3e2b02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm6","pattern":"[url:value = 'http://94.154.43.146/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--374b1b01-8469-63f6-0d7c-0000bd8c7c2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.m68k","pattern":"[url:value = 'http://94.154.43.237/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfc7abf-eac9-6dcc-766a-00005bafd335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.arc","pattern":"[url:value = 'http://94.154.43.237/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060ec39d-f734-17f1-84d4-000006d2c781","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv5l","pattern":"[url:value = 'http://94.154.43.237/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9918a2fd-9c47-df07-3bac-0000c637e389","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm4","pattern":"[url:value = 'http://94.154.43.146/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0011f347-c073-14f0-f4ff-0000d4824c67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm7","pattern":"[url:value = 'http://94.154.43.146/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b672fd7-9365-5835-aeff-0000bd7aaaf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mips","pattern":"[url:value = 'http://94.154.43.237/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d23905e-dece-d47e-180b-00004172bd51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv6l","pattern":"[url:value = 'http://94.154.43.237/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae777571-f02e-fb23-09eb-00003d6c2e4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.i486","pattern":"[url:value = 'http://94.154.43.237/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dbe0920-ecd4-1923-265c-000031202681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.powerpc","pattern":"[url:value = 'http://94.154.43.237/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ffb588-4d05-d908-7e73-0000afe0ba9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsel","pattern":"[url:value = 'http://94.154.43.237/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca56bde1-9041-a9c4-99cb-00008f35dbc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/a.sh","pattern":"[url:value = 'http://94.154.43.237/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77c332d-e107-8509-6e21-0000693bc89d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sh4","pattern":"[url:value = 'http://94.154.43.237/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f15f2dc-9787-45f5-916c-00003bb2ee31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv4l","pattern":"[url:value = 'http://94.154.43.237/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3438a11f-6cd7-0eaa-3120-00007c1294e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv7l","pattern":"[url:value = 'http://94.154.43.237/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5599afef-c8b5-1185-72f3-0000f68459a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.x86_64","pattern":"[url:value = 'http://94.154.43.237/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84b36c7-33b6-3a5d-25b6-00000884ccee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sparc","pattern":"[url:value = 'http://94.154.43.237/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06aabe2-fbf6-51a0-9c7e-0000be84acc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm6","pattern":"[url:value = 'http://94.154.43.175/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72d2e6c-e645-cae0-32a0-0000fb632244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.237/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5963fa58-0cff-37f0-f1ae-0000ac31032a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm5","pattern":"[url:value = 'http://94.154.43.175/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c74701-f49e-9f70-b1ce-00004f8ca19e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mpsl","pattern":"[url:value = 'http://94.154.43.175/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631581c8-43b7-8e91-d83e-0000248fcfd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mips","pattern":"[url:value = 'http://94.154.43.175/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b9aa9-0555-f16d-955d-00007311f9a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm7","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0381ab32-fb44-20af-1cdc-000004d5a2c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c146dc-667b-acaa-3bef-00003aa5939c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mpsl","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6591c3e-35f1-163a-3f37-00002e4339df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fb4c3-176c-5f5d-2b49-000051502b0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.m68k","pattern":"[url:value = 'http://94.154.43.10/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76d9b74-c8a5-c014-6179-00000638cba1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm7","pattern":"[url:value = 'http://94.154.43.175/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb9cfa7-c858-4c61-1912-0000d69ece5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.sh4","pattern":"[url:value = 'http://94.154.43.10/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0870edd-03b4-75fe-d11f-00009c78d860","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.i686","pattern":"[url:value = 'http://94.154.43.10/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76138015-a67b-ff5b-577a-000051a6fdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mips","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ad93a9-4538-ac0c-3053-0000d0d42504","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.spc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65fb85-0651-c3a8-e079-0000d9183128","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm5","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--783f810e-d536-2c0f-3c34-00006a16eceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz.sh","pattern":"[url:value = 'http://94.154.43.10/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4398635-7d62-ef3a-bc52-0000e40ad5f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a56bb-5231-7349-feb8-00002cfe57b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/debug","pattern":"[url:value = 'http://94.154.43.10/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb2df0-56be-c552-9951-0000564057aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.ppc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56caa3f-5256-4506-f01f-0000cbad9ec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm6","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3ca92e-4e57-5efc-7796-0000960f5589","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86_64","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15ae4408-6402-c5d8-61fc-00005f1e10ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i586","pattern":"[url:value = 'http://94.154.43.84/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabce564-3294-aed2-f2df-00005a76deb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mipsel","pattern":"[url:value = 'http://94.154.43.84/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d56a230-5f3f-0c07-5ce0-0000ce248a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv4l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7daff03-f32d-b05e-cd9a-000003123d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.x86_64","pattern":"[url:value = 'http://94.154.43.84/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c1178d9-e3c1-bad8-7d3b-0000fb789871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.sh4","pattern":"[url:value = 'http://94.154.43.84/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e8fa51-f0fa-0275-93a8-0000d98a6243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i686","pattern":"[url:value = 'http://94.154.43.84/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944d9371-a0c2-b5ae-a2dc-0000f344a3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv5l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a490e423-cd1b-c2af-fd7c-00000460181f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.powerpc","pattern":"[url:value = 'http://94.154.43.84/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf60c0b2-c630-3174-6671-0000b4e4d979","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv6l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50404f-9097-14f5-0167-000014a2912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.m68k","pattern":"[url:value = 'http://94.154.43.84/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17c7499-0fbf-7cd7-1e56-0000145447f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mips","pattern":"[url:value = 'http://94.154.43.84/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67bf1f3-6c6a-83a2-2d2e-00008984f0c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv7l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7112846-a7e0-6a63-a659-0000b78c3a43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/w.sh","pattern":"[url:value = 'http://94.154.43.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7d6026-6fda-d449-01a8-000083ff19a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm","pattern":"[url:value = 'http://94.154.43.122/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d16124e-9cd6-683c-2421-00000252208b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86_64","pattern":"[url:value = 'http://94.154.43.122/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb7a8a3-420d-1cb3-fa56-00001c93b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mips","pattern":"[url:value = 'http://94.154.43.122/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56c1d333-ddad-2ed9-d9ee-0000942d7acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm5","pattern":"[url:value = 'http://94.154.43.122/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40700829-abf6-15d4-9833-00005b36c3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mipsel","pattern":"[url:value = 'http://94.154.43.122/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75158bd-281c-2dd1-cb41-000057fe9e64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/spc","pattern":"[url:value = 'http://94.154.43.122/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cfb21f-e9e8-8c21-2430-00003e24b240","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm7","pattern":"[url:value = 'http://94.154.43.122/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--209b9c75-e853-d0c9-e0cc-00001c6560ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/m68k","pattern":"[url:value = 'http://94.154.43.122/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc88289-24c4-5c4d-8005-00008698d525","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm6","pattern":"[url:value = 'http://94.154.43.122/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a5d72a-187a-b02b-6c41-0000a96982bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86","pattern":"[url:value = 'http://94.154.43.122/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c04504b3-6e1d-d9fc-a229-000051b4753c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/sh4","pattern":"[url:value = 'http://94.154.43.122/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b517e6e4-b286-bcf9-bd33-0000d16aecca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/ppc","pattern":"[url:value = 'http://94.154.43.122/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3228aa6a-7a32-627b-42b2-0000d06bf7f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/bin.sh","pattern":"[url:value = 'http://182.112.13.24:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57895b2b-3f2a-bcd1-26bf-00000d4553e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/i","pattern":"[url:value = 'http://110.36.86.0:40490/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f5b5f5-b891-5d90-36ba-0000131ca803","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/bin.sh","pattern":"[url:value = 'http://175.149.135.190:37738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54fbf35-ed63-c908-beeb-000053e88c66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/bin.sh","pattern":"[url:value = 'http://110.39.224.167:59812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8f53aa-d471-6353-d790-0000cc080dc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.152.223.228/svc.exe","pattern":"[url:value = 'http://93.152.223.228/svc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9056a341-39f3-0181-4245-0000820cb922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c9e3b-d7a6-27fa-6d27-0000778ec568","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/0NOjfFC.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/0NOjfFC.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be565f17-0eae-407e-6cb5-0000523445bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/i","pattern":"[url:value = 'http://110.39.224.167:59812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46dc40-377d-04f3-b99f-000036dea627","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/bin.sh","pattern":"[url:value = 'http://218.13.149.41:37814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc33122d-392c-fa2c-133d-000003c78104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/PithnoModule.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/PithnoModule.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9494cd51-9e94-13f2-96f2-0000103effe3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/i","pattern":"[url:value = 'http://175.149.135.190:37738/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b31b0cb5-f360-10f9-a558-00001133ff06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/i","pattern":"[url:value = 'http://125.43.23.92:55029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55342b4-8f15-24d5-4347-0000060c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/i","pattern":"[url:value = 'http://218.13.149.41:37814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8015d086-7f62-2d96-f3b5-0000fd2b03e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/i","pattern":"[url:value = 'http://123.8.160.185:35924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0a3f1c-10ff-163a-235c-00005941dc37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/bin.sh","pattern":"[url:value = 'http://123.8.160.185:35924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c67792-de9b-4eca-bf31-00001898a143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Cgt6XB8.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Cgt6XB8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ca2a05-8c8c-7d3b-92e3-0000e6676056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/bin.sh","pattern":"[url:value = 'http://210.208.111.234:45761/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a7f47-54a4-fbdf-ec65-0000d46642e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/bin.sh","pattern":"[url:value = 'http://115.58.88.232:50270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7060eee2-2e32-aaab-a62a-0000d35ffe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/i","pattern":"[url:value = 'http://210.208.111.234:45761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee8d096-2ebe-e992-9b12-000022012e77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.34:44324/i","pattern":"[url:value = 'http://59.97.252.34:44324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a94e8d-4c9d-7466-0d43-0000dc6bb4c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/bin.sh","pattern":"[url:value = 'http://27.194.27.62:59829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a4681d-652e-e0bf-ec63-00009c17f341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/i","pattern":"[url:value = 'http://113.239.81.215:38553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd872b4b-84a8-aefe-13dd-00008d15ccb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/bin.sh","pattern":"[url:value = 'http://175.151.64.247:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e48520-d28c-1a83-6f33-00002da84925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/debug.dbg","pattern":"[url:value = 'http://198.144.179.82/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63481e06-6e02-f638-cdbb-00005cbdcf02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86","pattern":"[url:value = 'http://198.144.179.82/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e25219-74ad-a829-17bb-0000210861b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm5","pattern":"[url:value = 'http://198.144.179.82/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdeb03a3-661f-927b-93ff-000033bdce59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm6","pattern":"[url:value = 'http://198.144.179.82/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c25ff3-1529-3d00-b983-00000bbd6ab8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86_64","pattern":"[url:value = 'http://198.144.179.82/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cbc9191-2e2b-4413-c4b5-0000a22ad3d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/spc","pattern":"[url:value = 'http://198.144.179.82/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba8cd9f-d5bc-f669-ff14-0000a4603881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/sh4","pattern":"[url:value = 'http://198.144.179.82/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efa2fc8-f832-be1a-8769-000024bea177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/ppc","pattern":"[url:value = 'http://198.144.179.82/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aec3335-06e8-e721-d357-00008b01a93c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm7","pattern":"[url:value = 'http://198.144.179.82/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8690a90a-7af7-f44a-bda1-0000762b541a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm","pattern":"[url:value = 'http://198.144.179.82/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb46ef40-6f9f-fbf6-5b73-0000c2b5c303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mpsl","pattern":"[url:value = 'http://198.144.179.82/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e942989-cbcf-0628-2ad4-0000a9b6ad49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mips","pattern":"[url:value = 'http://198.144.179.82/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc940269-b87f-5209-6a18-000076248062","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm64","pattern":"[url:value = 'http://198.144.179.82/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b81d5f-68d1-5b45-01b2-0000a9407b93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/m68k","pattern":"[url:value = 'http://198.144.179.82/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542b6310-1615-46e0-4c7c-00000a3c27ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8894093030/v8eACE4.exe","pattern":"[url:value = 'http://62.60.226.140/files/8894093030/v8eACE4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23c69a9-08ba-7adb-0f80-0000b98f8fea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/bin.sh","pattern":"[url:value = 'http://42.239.224.11:42582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4c4c8c-384f-7473-428e-00003fffaa64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.181.102.189:53344/bin.sh","pattern":"[url:value = 'http://103.181.102.189:53344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da85dcd7-292c-91f5-dd3a-0000ccef9b7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/bin.sh","pattern":"[url:value = 'http://36.48.114.30:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--085b09e9-ccf4-1b74-42c9-00007f3e9dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/i","pattern":"[url:value = 'http://95.56.232.109:58750/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f15d40-548b-96db-72fc-00004143292d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/i","pattern":"[url:value = 'http://42.239.224.11:42582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13f9abb-db45-f468-ccae-000000b51b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/bin.sh","pattern":"[url:value = 'http://123.4.203.194:35564/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11722625-fa89-aed5-dee7-0000b7255280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/i","pattern":"[url:value = 'http://60.177.244.198:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b4132c-bfea-4c67-31dc-000068c2cc25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/i","pattern":"[url:value = 'http://36.48.114.30:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f6836d-ff02-b614-7026-0000f0098138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/bin.sh","pattern":"[url:value = 'http://182.123.143.22:37354/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f661f74-58dc-7947-922d-0000ce054fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.175.206:55714/i","pattern":"[url:value = 'http://123.5.175.206:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac31421-6fcc-d054-1b10-0000e13a2dec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/bin.sh","pattern":"[url:value = 'http://101.108.253.192:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb1bac4-0c8f-b3b1-0e25-0000c09cbe35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.121.27:53153/i","pattern":"[url:value = 'http://105.184.121.27:53153/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55504c9-4347-5da3-a200-0000156588bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/i","pattern":"[url:value = 'http://182.123.143.22:37354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e895c9-cc4d-fbda-f558-0000c8effc45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5e7528-2cec-46f7-3c2f-00001cb3a388","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.215:48371/i","pattern":"[url:value = 'http://120.84.214.215:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b54640-173c-18fc-a8b3-000099c467c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--195b7023-459e-1123-a757-00001dfb4c84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2757082e-c054-89e7-fbe5-0000fb73603c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4b01d4-3ff6-a256-e57c-000086e37184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977259ec-fa65-948b-183f-000081fc9af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526e7ed4-7c26-9840-7d5f-00006540c037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4819d81-9ab0-bc6c-2bf7-00004ad1733c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af64e53e-a9bc-a7b1-7e6f-0000b3552f73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49115d1b-3dfd-603b-7f1e-000081a00a9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66cce6-5ebc-3815-1501-00009a87b5ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--787361b4-9de2-3c9f-bfe3-000083cb697a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4dd394-7d56-e596-3586-0000ac14fe2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dfb7fa-ff4f-6927-767a-0000f1cd4497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c9b1cc-9367-d429-b29b-000073a5cf83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55e2ed2-d141-741e-a4db-0000fdafd1fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c575944-9de4-99b9-20ab-00001d934264","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81102e18-bf16-ea3e-de6e-0000f0f3aeaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede5def3-c2f0-3d17-b166-00008c2f76ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8faefa5f-50c4-0e86-477e-00004cabab74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1aa30e-8e41-c57f-9a57-000086a07eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da5da0a-5113-9bce-6b19-0000248abaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5bd289-62cf-aa26-d9e8-000055254aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90893f94-b173-863a-8cc0-0000c2d644aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.41.127:41358/i","pattern":"[url:value = 'http://182.113.41.127:41358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14655332-f59f-13cf-0d80-00007fd7ef04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/i","pattern":"[url:value = 'http://120.28.194.30:35812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cad90b-0b30-f44c-66c5-0000d368ffe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/i","pattern":"[url:value = 'http://101.108.253.192:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666a9b1a-69cb-9646-f67e-0000da15b8f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/bin.sh","pattern":"[url:value = 'http://95.56.232.109:58750/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea00cf2-27a9-c30a-f446-000038550e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.132.10:54132/bin.sh","pattern":"[url:value = 'http://59.180.132.10:54132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2492082-0c85-c05b-0f7e-00008c435724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/bin.sh","pattern":"[url:value = 'http://42.226.69.203:60026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2ca642-051c-8d66-3550-00004ded6b52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/i","pattern":"[url:value = 'http://42.226.69.203:60026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf3a4c10-5a43-33b1-62da-000072903fda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47839/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9676def9-ab67-6fe4-ca48-0000e8be31ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/bin.sh","pattern":"[url:value = 'http://123.14.127.32:60165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf370f8f-0879-c0a4-01be-0000213aa06c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/i","pattern":"[url:value = 'http://196.190.133.180:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65c4373-0d32-edab-2c84-00001b489258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.153.109:41774/i","pattern":"[url:value = 'http://61.53.153.109:41774/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90cd38b-1394-1a63-9370-0000bab56be1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d10b325-35df-c422-9f9a-000018af2c87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.64.43:42442/bin.sh","pattern":"[url:value = 'http://114.227.64.43:42442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c99b8d-8874-e791-fb93-00006d96e47b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.162.6:59734/i","pattern":"[url:value = 'http://42.234.162.6:59734/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a57ea5b-db70-067c-07e8-0000c5015ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/i","pattern":"[url:value = 'http://123.14.127.32:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f63feff-829e-3061-d320-0000146a8dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/bin.sh","pattern":"[url:value = 'http://123.5.153.69:57210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ae888a-ac2c-cf95-8bf8-0000dae047a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.64:48265/i","pattern":"[url:value = 'http://182.116.113.64:48265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeaec7d-77b0-9cc0-55dc-00001a4b09c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/i","pattern":"[url:value = 'http://42.224.194.129:53622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b347684-d577-ab3a-8106-00004a9bdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/bin.sh","pattern":"[url:value = 'http://42.231.187.33:46290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce75ef8-b1f1-ac51-a781-000055f760cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.236.135.234:57543/bin.sh","pattern":"[url:value = 'http://113.236.135.234:57543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144f868-a338-615e-13e9-00001f66319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.184:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f850749f-1b4d-d336-c4eb-00002201579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/i","pattern":"[url:value = 'http://182.117.78.184:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c730de6-032a-b212-07f5-000025bbb70b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/i","pattern":"[url:value = 'http://110.38.210.180:57109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d7e29b-b7e1-dedc-de83-000071cfc4c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/bin.sh","pattern":"[url:value = 'http://221.225.253.118:42553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7bdc42-c033-3314-e6d7-00006d323e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/bin.sh","pattern":"[url:value = 'http://119.166.79.188:45758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f0c221-d193-3b57-0038-000089882e6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/i","pattern":"[url:value = 'http://119.166.79.188:45758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10402521-2484-62f6-e62c-000053d6f81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/bin.sh","pattern":"[url:value = 'http://42.224.67.38:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf1c3bc9-e66d-e42f-b48a-000042bb5bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.135.234:57543/i","pattern":"[url:value = 'http://113.236.135.234:57543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f205f4-c23e-5a66-6974-0000687ff973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/i","pattern":"[url:value = 'http://221.225.253.118:42553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102cb44-9dc6-ba5e-8149-000045e50f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.211.139:46635/i","pattern":"[url:value = 'http://110.38.211.139:46635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac886b4-e7d7-e890-9995-0000ce476607","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/i","pattern":"[url:value = 'http://42.231.187.33:46290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e828d0-cf3a-1f81-79f6-00008a73b40e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/bin.sh","pattern":"[url:value = 'http://123.9.41.95:38149/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac2dcc6-8105-83b2-b342-000039b38669","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/i","pattern":"[url:value = 'http://42.224.67.38:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b38a1f-9153-13b0-11f5-000070083334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/bin.sh","pattern":"[url:value = 'http://110.36.77.162:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff00e482-6073-eb4c-eba6-00002cd5bc57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.9.97:44103/i","pattern":"[url:value = 'http://115.55.9.97:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a2fbe9-729d-f07c-c9be-00009dd55456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i486","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4b2ccb-055c-6bc5-fd12-0000b1b3cf25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/wget.sh","pattern":"[url:value = 'http://91.92.47.97/bins/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6613c5ca-0572-0a03-6075-00005a7d348b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1341279d-30cf-4018-cdda-0000daa3ad7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.sh4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05606786-6a71-b4f0-d208-000076c0bea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mpsl","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e601ca0f-7b64-0fa6-2fd8-0000b9380d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86_64","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd8b65-87af-61d6-e370-000087c8b3fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm6","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b2a14f-07a9-fb7a-e235-00001dc3d0eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mips","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64557b93-d6da-2ed1-aca6-0000dce94625","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.spc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c16e0f-4bed-91da-e682-0000e837b6d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac4dadf-542c-26f3-f988-0000957d1c15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm5","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdb2620-c903-3575-7b76-00001ee48bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc440","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646091de-7ed7-93cf-3fef-0000568987f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i586","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f475a662-01ab-9d14-c43a-00006717c4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm8","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc3ea49-7220-262d-fc73-00002dc17b70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9e9599-ae67-533c-bf30-00001d350631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.m68k","pattern":"[url:value = 'http://91.92.47.97/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cabbf3-9a66-bc11-ea2e-00003f74d49e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm7","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba1f404-bb67-a381-d0f2-0000227e5afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c9c8d3-f450-4226-76b7-00009a22e991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/i","pattern":"[url:value = 'http://210.208.110.172:59900/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c31e37-f8aa-bfb7-cb0d-0000037e1af8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/bin.sh","pattern":"[url:value = 'http://60.184.149.85:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--137e1cb8-3206-d329-c4ac-00006ef1eb73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/i","pattern":"[url:value = 'http://115.54.117.199:59554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5abd48-d794-0d2b-00b1-0000502af173","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/bin.sh","pattern":"[url:value = 'http://222.141.13.126:32997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2b1257-81ed-1572-21c2-000049cdf4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/bin.sh","pattern":"[url:value = 'http://115.58.143.1:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48994f0e-598f-6b7d-e190-000000da10c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/i","pattern":"[url:value = 'http://110.36.77.162:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8884cb-8ce3-87ec-6c49-0000d5006a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/i","pattern":"[url:value = 'http://60.184.149.85:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1c479e-de3c-61ca-2aa1-0000a8c255d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.248.169:58267/i","pattern":"[url:value = 'http://110.39.248.169:58267/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9bf6e1-4ea1-be56-783c-0000796df3a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/523965","pattern":"[url:value = 'http://5.182.210.174/523965']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72ec1ebb-5a5c-59fb-2150-00004080c5a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/694268","pattern":"[url:value = 'http://5.182.210.174/694268']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d367acdf-b608-92a6-ddcb-0000a3c7306e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/46c7b2","pattern":"[url:value = 'http://5.182.210.174/46c7b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b5c9ef-9350-6291-6c9b-0000f7fbf92e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9846b5","pattern":"[url:value = 'http://5.182.210.174/9846b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063c568c-7144-86b8-e89f-0000dfd72119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7836d7","pattern":"[url:value = 'http://5.182.210.174/7836d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1a268f-dfec-a9a8-0aae-000020a36333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00df69","pattern":"[url:value = 'http://5.182.210.174/00df69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bc28539-6c15-6c59-a5a4-0000ec525418","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e5a00","pattern":"[url:value = 'http://5.182.210.174/8e5a00']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67666c3-443b-087f-cdfc-0000ed5e7529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/796fc4","pattern":"[url:value = 'http://5.182.210.174/796fc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5770dea-c6e2-9497-06b7-00002bcc8adf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a8ac25","pattern":"[url:value = 'http://5.182.210.174/a8ac25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b5757e-548e-f644-3896-0000435acaf0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5969e9","pattern":"[url:value = 'http://5.182.210.174/5969e9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa0cd8-3adb-e4bb-d8dc-0000ed5a24a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1a029e","pattern":"[url:value = 'http://5.182.210.174/1a029e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bae0e34-8941-aeac-5a72-000078f9abc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6b8b4d","pattern":"[url:value = 'http://5.182.210.174/6b8b4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e6cf18-1dce-ce2b-ddf3-0000e3483bcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/47b560","pattern":"[url:value = 'http://5.182.210.174/47b560']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417ef614-ce6c-1e04-0c4f-00001a025443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acdc3b","pattern":"[url:value = 'http://5.182.210.174/acdc3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61daacef-3513-c98a-ddc4-0000327c1a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e51ddb","pattern":"[url:value = 'http://5.182.210.174/e51ddb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18992714-0af6-dd15-2ed7-0000bc4fd79f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5ee89","pattern":"[url:value = 'http://5.182.210.174/c5ee89']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb551eac-2921-1280-5aa8-0000eb547bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4b26b9","pattern":"[url:value = 'http://5.182.210.174/4b26b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20036c91-3a1e-5751-4970-000058e6e258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c9023c","pattern":"[url:value = 'http://5.182.210.174/c9023c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e778b6b-2f79-23dd-e547-0000a6e2c41e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f873b2","pattern":"[url:value = 'http://5.182.210.174/f873b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdddb62-4ff2-29f1-a3c8-0000258be8d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1d493","pattern":"[url:value = 'http://5.182.210.174/a1d493']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5ea4c0-4936-452f-7993-00002361d6ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ec572","pattern":"[url:value = 'http://5.182.210.174/8ec572']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ceab23-e1c3-5b29-257c-0000ff523757","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d1d1d3","pattern":"[url:value = 'http://5.182.210.174/d1d1d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6deb3487-6336-cfcb-9abf-00009cfe80c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fefd81","pattern":"[url:value = 'http://5.182.210.174/fefd81']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc63305e-c600-a195-67aa-000099a940d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7e327","pattern":"[url:value = 'http://5.182.210.174/b7e327']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b6a10f-4af1-0233-cb20-00006a3499e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba982a","pattern":"[url:value = 'http://5.182.210.174/ba982a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca4d9ae-cb3d-c50f-4fe4-0000a6d12caf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de3e3b","pattern":"[url:value = 'http://5.182.210.174/de3e3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6a7a29-2e14-506b-8d06-0000bb5d2184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c6503e","pattern":"[url:value = 'http://5.182.210.174/c6503e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369cff40-1847-8b42-e8b1-0000ee71ea45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/af8816","pattern":"[url:value = 'http://5.182.210.174/af8816']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6bbe3d-0f1a-aa0b-05e9-000078e30876","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dfbfd1","pattern":"[url:value = 'http://5.182.210.174/dfbfd1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a7d69f-1a48-7c92-3c7a-00009de9ee09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a74d7e","pattern":"[url:value = 'http://5.182.210.174/a74d7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ededa808-8675-facc-dc5e-00004200bcdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b2ad0","pattern":"[url:value = 'http://5.182.210.174/1b2ad0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b8dc84-5080-7331-5f02-0000fa7d4716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1493f3","pattern":"[url:value = 'http://5.182.210.174/1493f3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71c7d41-b82a-851a-8a6c-00000bbef91a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/18c0c9","pattern":"[url:value = 'http://5.182.210.174/18c0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93964e5f-f0d9-2345-4198-0000e400784a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6af82","pattern":"[url:value = 'http://5.182.210.174/e6af82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e69061c-1bfc-d159-0b27-0000837e61ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ef2a92","pattern":"[url:value = 'http://5.182.210.174/ef2a92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22018b82-4937-4435-d2a0-0000b9b7fb74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e9f60","pattern":"[url:value = 'http://5.182.210.174/8e9f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37899535-8ec3-18ac-af5c-00004e842739","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pm68k","pattern":"[url:value = 'http://157.173.119.111/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bafcbc5-3d64-4b9b-df63-00000d75a182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.arc","pattern":"[url:value = 'http://77.239.124.108/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b3f2fd-026b-d0b8-315b-00003d88c4c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86_64","pattern":"[url:value = 'http://157.173.119.111/bins/px86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afddbb5f-50e7-c711-7be3-00006cc5f596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm7","pattern":"[url:value = 'http://157.173.119.111/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3da73-7389-927e-6f4c-0000c6cc3d1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm5","pattern":"[url:value = 'http://157.173.119.111/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c58d9a9-a04d-4ecf-d742-0000179584dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.aarch64","pattern":"[url:value = 'http://77.239.124.108/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58edf57d-d657-7e2d-65b8-00001f2f35c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.powerpc","pattern":"[url:value = 'http://77.239.124.108/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0343dd58-618d-acc2-45c7-00004d9a91dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.x86_64","pattern":"[url:value = 'http://77.239.124.108/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf9e2e9-f484-3527-142b-0000fa6c752c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv6l","pattern":"[url:value = 'http://77.239.124.108/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ca63b8-59e6-536b-f8c0-00000a5af914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm","pattern":"[url:value = 'http://157.173.119.111/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d4b12a-c387-9940-e299-0000bdcc0ffc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv5l","pattern":"[url:value = 'http://77.239.124.108/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e65b23-9cd9-1ab2-21fd-0000de5b7ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pspc","pattern":"[url:value = 'http://157.173.119.111/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f2072d-08fc-0c2c-24db-0000d811958f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/psh4","pattern":"[url:value = 'http://157.173.119.111/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce77672a-8ff6-965f-a95f-000025719fa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmpsl","pattern":"[url:value = 'http://157.173.119.111/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e2d3a8-f394-8476-0560-0000c70c5c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv7l","pattern":"[url:value = 'http://77.239.124.108/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba5a1e3-9d93-6ab6-6e77-00004e72f1e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmips","pattern":"[url:value = 'http://157.173.119.111/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fda2f2-d58d-9690-d6ff-00001d0bb25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sparc","pattern":"[url:value = 'http://77.239.124.108/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a0e57a-77f1-00a8-b8a5-000058cf0c79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pppc","pattern":"[url:value = 'http://157.173.119.111/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb31e444-9171-493e-57be-0000e82956ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mips","pattern":"[url:value = 'http://77.239.124.108/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49cf806b-d10c-17e5-1517-000080ac264c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv4l","pattern":"[url:value = 'http://77.239.124.108/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8da8bc9-b48e-f4ae-0329-0000d47992f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm6","pattern":"[url:value = 'http://157.173.119.111/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e21bee2-1323-f157-b8cb-0000683fd216","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.i486","pattern":"[url:value = 'http://77.239.124.108/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--871dd092-09cd-ce5f-c178-0000e8df8071","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.m68k","pattern":"[url:value = 'http://77.239.124.108/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e25c73f-3887-f09e-f9d0-000014fe72e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mipsel","pattern":"[url:value = 'http://77.239.124.108/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--212f8257-056b-d531-aa41-00003fe1ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sh4","pattern":"[url:value = 'http://77.239.124.108/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d12d4b4-5038-f62e-803e-000020cc620c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86","pattern":"[url:value = 'http://157.173.119.111/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--133b1c4e-d108-6b46-d533-0000d90e510e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sparc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee38f883-83b5-463f-1d2c-0000e36233b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea95cdc-5e94-1fb8-9688-0000c9e18000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454baa2-9bb6-4782-ad9e-00005ca61fab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1054014b-b83b-11bf-7176-0000fda48333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sh4","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb007884-0e9e-4cb9-eb2b-0000f5ac05b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e2053ce-06af-dbe5-ea3e-0000c5bfd0f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1778aa22-6258-4a64-ee86-0000c5897a5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sh4","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e600b1ec-a16b-ab96-5995-0000a950f375","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sparc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6836df-aa0c-5fa6-a253-0000b8d64f57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mips","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afaf31f2-519c-d801-efc6-0000c2025b74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm8","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f102c63-19d7-9b04-69f4-00009a614b22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm7","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44d074f-2115-fa10-af77-0000c89c246d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mipsel","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f92b1d28-392f-ff18-e167-000091f8c753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86_64","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa40ceb7-26b2-4533-38de-000017c216c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7440209-002a-b138-320c-0000b820998d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.m68k","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9879bb-c0d4-a450-e4af-00003d548dd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622a4875-caae-21d5-99e4-00004557e3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.ppc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df01c388-04ac-72e2-7e69-00008c80bb52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mips","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6c65de-4261-4a29-61c9-00002fefefa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b4d2d2-06a0-26e5-8313-0000057974b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc6c4a5-4058-c8ae-fafd-0000f654af71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm8","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec60fe26-6339-4a76-89df-00000f3bd27b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mipsel","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b79d934-fb6f-3c75-7417-0000ae37bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm7","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11279980-9728-73f5-1037-000010cada07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/dl.sh","pattern":"[url:value = 'http://91.92.42.242:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe4a4bb-6625-e2d2-a5ab-000050710b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dlink.sh","pattern":"[url:value = 'http://31.77.227.102/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8b5c8d-624a-3cb8-91e4-000071ff8557","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/dl.sh","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d2aeed-c353-6a09-07c1-00000d1524eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arc","pattern":"[url:value = 'http://94.154.43.67/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a04014a-4e6d-c939-dbe7-0000970db8ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.i586","pattern":"[url:value = 'http://94.154.43.67/bins/David.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da639507-9758-a39d-0e25-000029b41d4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03235831-cf77-5f3e-88a4-000001da6c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e178cbf2-64cd-000e-86c3-000034e6157a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.67/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b7f530-ad8a-4b3f-c8bd-0000ecd39350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/check3.sh","pattern":"[url:value = 'http://43.228.157.73/check3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c106e441-23d3-1acf-f00b-0000565f3145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86_64","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6506e31c-a529-0f17-7fbc-00007d7a1ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.ppc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932df75e-6770-585e-52f0-00008c766d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.m68k","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a76b91e-5e52-e760-180a-00006eaf0a26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/bin.sh","pattern":"[url:value = 'http://42.59.235.112:57254/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0443051-9a2d-899b-241a-000037ffb2f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/i","pattern":"[url:value = 'http://222.141.13.126:32997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15aa7c88-e3f6-25ca-747d-0000aed9738f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/bin.sh","pattern":"[url:value = 'http://182.116.50.112:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a13087b-34e5-bb63-03f4-0000e0b509e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/i","pattern":"[url:value = 'http://115.58.143.1:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88687dbe-f927-623b-9df4-0000e24e78ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/i","pattern":"[url:value = 'http://182.116.50.112:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03a2e04-afc0-5342-baf6-00003e743d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/bin.sh","pattern":"[url:value = 'http://120.28.193.143:37216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58299042-244f-c379-45f4-0000b49b0e2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/bin.sh","pattern":"[url:value = 'http://210.208.111.100:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6529e1a4-de33-29b0-dcce-00002fd0eab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.88.128:56380/i","pattern":"[url:value = 'http://123.8.88.128:56380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f0929c-be84-e923-6ecc-0000feb51e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/i","pattern":"[url:value = 'http://120.28.193.143:37216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1242bc38-0dc9-d412-bf14-00000eac309c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/bin.sh","pattern":"[url:value = 'http://42.235.52.223:51706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--373a1dbc-13ba-1f96-35fc-00000152f743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/i","pattern":"[url:value = 'http://210.208.111.100:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d824e15-9e00-e767-3cae-000083d7a4bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/i","pattern":"[url:value = 'http://42.235.52.223:51706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e61af26-0728-67a2-2c92-0000db9c8e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/bin.sh","pattern":"[url:value = 'http://42.233.30.71:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a869601-fb7d-8fb7-3698-0000d674245a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/i","pattern":"[url:value = 'http://42.238.236.39:56045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e5e8b3-8ce9-bd82-9f70-000075a96a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/bin.sh","pattern":"[url:value = 'http://219.156.112.14:60974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--786ba03e-6939-c104-73b2-0000aee48975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/bin.sh","pattern":"[url:value = 'http://117.131.92.150:58096/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537a0073-a88d-7be3-a67d-000012110bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4","pattern":"[url:value = 'https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4867a0fd-94d5-ab78-59d0-000034bbed77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/i","pattern":"[url:value = 'http://42.233.30.71:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c82fad-c072-93c9-f711-0000a275f974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://smsechodata.cc/run.bat","pattern":"[url:value = 'https://smsechodata.cc/run.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c773e0-5ffe-0110-2ac8-00005c86e89f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://timelevel12.com/big","pattern":"[url:value = 'https://timelevel12.com/big']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3553cfb-5e3a-8a40-fbea-0000251505a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.251.128:38940/bin.sh","pattern":"[url:value = 'http://182.122.251.128:38940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9feb84-aec6-0728-077a-0000cf7052ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/i","pattern":"[url:value = 'http://219.156.112.14:60974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d643ce8-92b4-8c18-9009-00006aab1825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.gej.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.gej.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3efe6e-26a5-c297-c529-0000fd6172a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/Mozi.m","pattern":"[url:value = 'http://110.38.210.180:57109/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e71a9-0723-7e86-5a93-0000982817e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/loader","pattern":"[url:value = 'http://176.65.139.194/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287f1b29-8dd8-28f7-5b08-0000aa669fde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/i","pattern":"[url:value = 'http://125.42.255.46:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf36d12-46e7-db6d-b595-00001f338420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/bin.sh","pattern":"[url:value = 'http://42.238.236.39:56045/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32a8545-becb-47bb-f779-00001f68affe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/bin.sh","pattern":"[url:value = 'http://203.101.187.5:40888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcca8ccb-600e-fb5b-e940-0000850bc01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/i","pattern":"[url:value = 'http://123.129.132.69:54242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8571c66d-0475-d2b3-7907-00000edb2c3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/bin.sh","pattern":"[url:value = 'http://113.237.104.66:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d34f33-e99d-118e-5546-0000ba60cec7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/i","pattern":"[url:value = 'http://36.36.197.26:60794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f004216-c264-a142-461a-00002e92b7f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/i","pattern":"[url:value = 'http://113.237.104.66:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58aa08fc-4903-7685-a933-0000b6720fbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/i","pattern":"[url:value = 'http://117.131.92.150:58096/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f891f41-9c93-03f6-56c2-0000dc10976c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.173.101.30:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.30:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a97c8e-7d9c-9e92-1f78-0000335d5e7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1267fa3-6244-ff92-8bf4-000055e246a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/i","pattern":"[url:value = 'http://203.101.187.5:40888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0e867f-a314-82f7-62c0-000021ba7837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.196.158:47839/i","pattern":"[url:value = 'http://115.55.196.158:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6890956-ca15-446d-4afe-0000d9e197a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.101.30:46920/i","pattern":"[url:value = 'http://123.173.101.30:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81952ca2-22c9-ed0c-8de1-000097dec044","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.35.11:45721/i","pattern":"[url:value = 'http://27.217.35.11:45721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89daee3-643b-29d1-0045-0000e1e85511","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4d9515-11f3-adfb-3505-0000eac067eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74f0526-579d-87d1-c372-000053a2d74f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde74960-667f-c693-7945-0000a3740dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd34e8-c961-12ab-56ae-00002ba1b93a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--821de771-767d-72da-422c-0000d37c4eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae079f6-330d-3e39-7dd8-00001bc86ab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2583e4-ea58-c55a-c2f3-000001372222","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddb049f-5bc3-6517-59b2-000077547436","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.11.225:54040/i","pattern":"[url:value = 'http://110.36.11.225:54040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16553036-d5d4-3dc9-d69f-000010d74f12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/bin.sh","pattern":"[url:value = 'http://110.38.210.180:57109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b39698-b5b5-bf90-cf2f-0000720563b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:48881/bin.sh","pattern":"[url:value = 'http://156.146.26.225:48881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa18189c-3733-0e51-1546-0000910804cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/bin.sh","pattern":"[url:value = 'http://115.50.178.232:56864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562d3084-7b8a-6604-e109-000088d39c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.21.229:35387/bin.sh","pattern":"[url:value = 'http://115.52.21.229:35387/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2152139-c95c-98ac-3574-00003e8e6a7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/i","pattern":"[url:value = 'http://218.59.109.9:54831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72953a46-d524-f85e-9d19-000025ad0d1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.35.47:51278/i","pattern":"[url:value = 'http://125.44.35.47:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a09bad50-6899-aacc-2477-0000e4bee3d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/bin.sh","pattern":"[url:value = 'http://116.53.20.49:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2297f57-3ceb-ba60-964f-00007790806c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/i","pattern":"[url:value = 'http://61.53.119.47:53986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a80c84-abc6-03ee-bac0-000066f2925c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/i","pattern":"[url:value = 'http://120.28.144.161:35460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1285976e-2df1-1ea8-b8eb-000015edc8e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.204:47447/i","pattern":"[url:value = 'http://182.114.255.204:47447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91129709-00f2-43fc-c8b5-0000361e1325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/bin.sh","pattern":"[url:value = 'http://120.84.212.190:40164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5021dd-c419-281f-1657-000096d3a711","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/i","pattern":"[url:value = 'http://180.191.34.236:49441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0661af34-e2d1-6a36-d5a7-0000c43ef90c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/i","pattern":"[url:value = 'http://125.40.3.106:41323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdee2692-a151-e3b4-0b09-00008e8d65a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/i","pattern":"[url:value = 'http://115.56.66.143:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936e955d-3a0f-1dde-01cc-0000362ecade","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/bin.sh","pattern":"[url:value = 'http://115.54.117.199:59554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47be1a6-10de-3889-7961-0000a9310e81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/bin.sh","pattern":"[url:value = 'http://124.161.116.2:53893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cf495f-07c7-0c3d-18ab-0000b9f6072d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/bin.sh","pattern":"[url:value = 'http://116.140.186.83:34139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcf69e1-612c-bb11-644d-0000e3b2f04d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/bin.sh","pattern":"[url:value = 'http://180.191.34.236:49441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f16aad-43fd-e775-f9c9-0000707eca2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/i","pattern":"[url:value = 'http://84.53.221.6:61495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c61815d-5536-77b2-1468-0000883f0015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/bin.sh","pattern":"[url:value = 'http://182.116.34.137:57791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc97ed0-fb1d-befc-de22-00002afb5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/bin.sh","pattern":"[url:value = 'http://115.50.0.3:52567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b072162-63ae-c7d4-f708-0000addedabb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/i","pattern":"[url:value = 'http://72.255.30.244:42024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f2e30e-6fba-0250-9115-0000d8085b3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/bin.sh","pattern":"[url:value = 'http://182.119.15.73:52944/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--888208ab-9adb-654b-f364-0000ea349fa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.161.119:46353/i","pattern":"[url:value = 'http://222.140.161.119:46353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6ac967-e6c6-316b-cb1a-00000eb17c97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/bin.sh","pattern":"[url:value = 'http://61.52.159.43:42655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d5dc2c-c7ff-c2fd-1fc2-00001e15562a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.42.15:52214/i","pattern":"[url:value = 'http://180.191.42.15:52214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa26683d-c83c-651f-a1c8-0000a7ec57c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.131.83:45094/i","pattern":"[url:value = 'http://125.46.131.83:45094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a822146b-5585-99bf-1350-00004b3af776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/i","pattern":"[url:value = 'http://115.50.178.232:56864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb29c64f-8457-381a-7659-000050a2674c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.118.24:44651/i","pattern":"[url:value = 'http://105.186.118.24:44651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--157023fc-7795-7de9-d2e2-0000a604c952","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/bin.sh","pattern":"[url:value = 'http://219.157.34.223:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a493ebce-56de-566a-5de2-0000bbcb1699","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/bin.sh","pattern":"[url:value = 'http://182.114.192.77:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8879619-3142-5c11-168d-0000b346e6a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/bin.sh","pattern":"[url:value = 'http://222.140.216.179:36444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462b2d73-a0d1-8ef2-9eaf-00002e57304e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/i","pattern":"[url:value = 'http://222.140.216.179:36444/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152ea14f-02a3-6a75-1bc8-0000e47a0f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.235.69:41594/i","pattern":"[url:value = 'http://60.23.235.69:41594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50eeebc-4b75-6d6b-d960-00001f77b14a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://146.158.4.238:41633/i","pattern":"[url:value = 'http://146.158.4.238:41633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b78b7a-ba4f-5ed9-a8c7-00002062cf1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.86.30:45927/i","pattern":"[url:value = 'http://125.40.86.30:45927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d200e1-d927-0279-b835-0000348b4c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/bin.sh","pattern":"[url:value = 'http://112.113.101.43:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f9b757-d872-6ea4-9e19-0000f2600f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.45.111:57854/i","pattern":"[url:value = 'http://182.113.45.111:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595a31-39b9-ce40-8272-0000833c963a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/i","pattern":"[url:value = 'http://182.116.34.137:57791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83254d7-6458-ed28-b1e7-00006ab0af23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/bin.sh","pattern":"[url:value = 'http://115.57.30.45:34814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84543a72-0c70-8f16-f68a-0000eaacb280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/bin.sh","pattern":"[url:value = 'http://61.53.119.47:53986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb043a-d11e-b1c0-44c7-0000b550fbc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/bin.sh","pattern":"[url:value = 'http://219.155.73.196:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8179c3d5-6b71-41d1-4417-0000b63affe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/bin.sh","pattern":"[url:value = 'http://182.126.113.147:53111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c889f5-0299-eaf4-a4d7-000038879df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.207.151:52550/i","pattern":"[url:value = 'http://110.38.207.151:52550/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c45330-99aa-c8aa-4846-0000dd82a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/i","pattern":"[url:value = 'http://219.157.34.223:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a18168-35fb-d355-9151-000031fbe512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/i","pattern":"[url:value = 'http://182.121.244.13:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36c6fd6-ed89-8c74-9a30-0000db135694","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.227.14:47543/i","pattern":"[url:value = 'http://125.41.227.14:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0fa25c-46f0-25c4-5453-00009d5e517b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/bin.sh","pattern":"[url:value = 'http://36.70.226.107:53300/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc079a9b-3960-98e3-3433-000010fae530","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/i","pattern":"[url:value = 'http://118.173.224.60:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f368f107-1662-5bbe-8684-0000bff76a4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/i","pattern":"[url:value = 'http://115.63.145.245:55982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1448ff7-e930-c8cd-2aa3-000089572107","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/bin.sh","pattern":"[url:value = 'http://37.157.219.158:39929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5f0201-e5ca-e513-dfc5-00003c5601f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/i","pattern":"[url:value = 'http://115.57.30.45:34814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff1d3c-976e-cf81-8d02-00000b69da83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/i","pattern":"[url:value = 'http://123.13.80.50:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5ba162-e9f9-62e1-173c-0000f4805f8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.34.92:60244/bin.sh","pattern":"[url:value = 'http://42.6.34.92:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd482b8-f4a6-b9f3-4ff4-0000b730064f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/bin.sh","pattern":"[url:value = 'http://42.239.179.192:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f722d085-3251-32fa-81a3-000047d018c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.78.154:48079/i","pattern":"[url:value = 'http://123.11.78.154:48079/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7976fa3-f14b-1618-18bb-0000a346d7df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/i","pattern":"[url:value = 'http://27.37.101.72:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a1ff41-80dd-2adb-7faa-0000b7dbcc32","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/i","pattern":"[url:value = 'http://210.208.111.36:53831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447d95b8-6ce4-8ee1-98d9-00001db9999c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/bin.sh","pattern":"[url:value = 'http://182.118.246.94:39103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf13f736-7ac7-f059-38e1-00000bd3eae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/i","pattern":"[url:value = 'http://37.157.219.158:39929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2595ed0-f102-de62-df69-00004f70e9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/i","pattern":"[url:value = 'http://219.156.20.248:59087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bcd3eb-4008-241f-f4a9-0000390313c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.74.117:55662/i","pattern":"[url:value = 'http://61.53.74.117:55662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01083f6e-1582-c69d-8cc6-0000e03a018b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/bin.sh","pattern":"[url:value = 'http://125.45.66.165:50850/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e480807-497b-23b7-4bc6-000041e7108f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/i","pattern":"[url:value = 'http://125.45.66.165:50850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a10e85b-72b8-6ca1-0499-00001f8fed35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/i","pattern":"[url:value = 'http://220.177.11.228:55723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ab6cab-48b7-1b8a-4444-0000a917a94c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/bin.sh","pattern":"[url:value = 'http://120.28.144.161:35460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af82da97-0e29-8f58-9092-0000744b24ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/bin.sh","pattern":"[url:value = 'http://118.173.224.60:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43f8dd4-c0c7-29f0-9294-000046bd13dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/i","pattern":"[url:value = 'http://42.87.163.211:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe50a37c-fc72-8fe8-e9e8-000047dc6aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/i","pattern":"[url:value = 'http://117.26.83.196:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108c5658-951c-49f0-4f7e-00009e360f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/bin.sh","pattern":"[url:value = 'http://42.87.163.211:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95acf24-1b2f-61f2-47b1-00000ceed800","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/i","pattern":"[url:value = 'http://61.53.110.220:49686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5becad-7cf0-65bd-51eb-00002ba4bf3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.162:42966/i","pattern":"[url:value = 'http://182.118.241.162:42966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--948cbdcf-01b4-2501-375f-0000dbe08bb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/i","pattern":"[url:value = 'http://115.50.0.3:52567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2454fbdd-ec9d-fe09-656f-0000ea694e72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.176.10.219:58446/bin.sh","pattern":"[url:value = 'http://60.176.10.219:58446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60c1142-ab52-4ad2-30a3-0000dd0773ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/bin.sh","pattern":"[url:value = 'http://123.13.80.50:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c5ae3c-4c53-a7b7-d702-0000028dfe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/bin.sh","pattern":"[url:value = 'http://46.236.65.163:51558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e43fc18-d051-70d7-1081-0000b19f0973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/i","pattern":"[url:value = 'http://61.52.159.43:42655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8caae4f-878d-8b18-2fb3-0000c4853542","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/bin.sh","pattern":"[url:value = 'http://112.198.238.18:53312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c20e1d-35cd-06c7-49bc-00000b61fb08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/bin.sh","pattern":"[url:value = 'http://222.142.252.116:35588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82704b3-2166-e774-335c-0000f2087560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.204.30:46437/i","pattern":"[url:value = 'http://123.11.204.30:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b9b5f-54f6-4535-6578-00008b46b693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/i","pattern":"[url:value = 'http://112.198.238.18:53312/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10892792-e7ec-740c-8f7d-00004440a0c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/i","pattern":"[url:value = 'http://182.114.192.77:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1080435f-1942-34e3-f8aa-0000a57ab3d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/i","pattern":"[url:value = 'http://66.212.173.225:35221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6afc56-633e-2ea7-c506-000089293126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.53.155:43350/i","pattern":"[url:value = 'http://125.44.53.155:43350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28acbc61-71b5-a12d-049d-00002a73eae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/bin.sh","pattern":"[url:value = 'http://61.53.110.220:49686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a8fc15-013d-f388-9b5e-00008e9fa176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/bin.sh","pattern":"[url:value = 'http://115.48.146.252:57987/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff527d-a5bf-c81b-1f61-00000dd06ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/i","pattern":"[url:value = 'http://123.9.41.95:38149/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfaf264b-f99e-6243-d683-00000d0e1a0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/bin.sh","pattern":"[url:value = 'http://125.42.255.46:55570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a79912-60e6-506d-3773-000003e53529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/bin.sh","pattern":"[url:value = 'http://210.208.111.220:46346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94cb6b3a-db7d-b652-e07f-000057358c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/i","pattern":"[url:value = 'http://113.239.221.126:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f7dcfd-0c7e-b48b-fb3f-0000473e4898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/bin.sh","pattern":"[url:value = 'http://113.239.221.126:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a14ec2-98b2-8f59-9491-0000a976f65d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.94.37:45880/i","pattern":"[url:value = 'http://175.147.94.37:45880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e224da17-48ee-2fd9-87db-0000aacb39fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/bin.sh","pattern":"[url:value = 'http://84.53.221.6:61495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619dfa6d-91de-4e38-1404-0000d494fb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/i","pattern":"[url:value = 'http://222.142.252.116:35588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a7f7bc-3367-8a99-6b2b-00002b7d037c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/i","pattern":"[url:value = 'http://175.174.110.158:47459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a8404d-1429-4cf9-1894-0000a4403fa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/bin.sh","pattern":"[url:value = 'http://115.61.242.68:50097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebda5098-a630-caef-b501-0000dbcbca93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/i","pattern":"[url:value = 'http://182.126.113.147:53111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e1d626-5578-df52-0a9a-0000c8d9cf43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.231.77.43:2715/i","pattern":"[url:value = 'http://121.231.77.43:2715/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc48044-d6c6-e115-009f-0000246ffe9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.66.162:41960/i","pattern":"[url:value = 'http://182.121.66.162:41960/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a63606-740c-8420-0ae2-00004652aed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/i","pattern":"[url:value = 'http://115.61.242.68:50097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fdbdcc-e7ea-cef2-d444-0000fea474a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/i","pattern":"[url:value = 'http://120.84.212.190:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5c6d32-f1fb-7820-3529-000061177c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.159.233:46480/bin.sh","pattern":"[url:value = 'http://222.140.159.233:46480/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd4212d-c490-cdbc-3326-0000c9c293bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/i","pattern":"[url:value = 'http://112.113.101.43:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6521ea5c-5f65-d714-14f1-000079289927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/bin.sh","pattern":"[url:value = 'http://115.56.66.143:59123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67e3659-a1a7-5f1d-15e0-0000a9ba9d69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.253.241:39307/i","pattern":"[url:value = 'http://113.239.253.241:39307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab11b30-4e40-1fc5-2c58-0000c54de824","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/bin.sh","pattern":"[url:value = 'http://39.78.26.151:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66fdb1a5-c2bc-a47d-ccbe-00001517cb1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.135:36545/i","pattern":"[url:value = 'http://120.84.212.135:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba27a654-fdd9-f070-eee5-0000c2946d7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/bin.sh","pattern":"[url:value = 'http://175.174.110.158:47459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1b2897-2313-351f-3925-0000db128cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/i","pattern":"[url:value = 'http://115.48.37.12:47625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f10a15-e4d1-a0a5-551b-0000dece0eb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/bin.sh","pattern":"[url:value = 'http://110.36.75.82:45777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb30da8-af81-6979-4e08-0000c4dbd5d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/i","pattern":"[url:value = 'http://125.41.72.148:43605/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a19203-c7c5-c8e3-7c69-000014968035","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/bin.sh","pattern":"[url:value = 'http://113.228.208.46:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0eda54-b9f7-2ee6-1f4a-000003acc35e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/i","pattern":"[url:value = 'http://110.36.75.82:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ec170c-e53d-bfea-849b-0000515396bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.168.51:58015/i","pattern":"[url:value = 'http://182.121.168.51:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8e75be-37db-eb20-5941-000063feb58c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/bin.sh","pattern":"[url:value = 'http://45.194.25.221:36557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448411aa-0eb2-2e8e-0a73-00009995f975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.187:38525/i","pattern":"[url:value = 'http://163.142.93.187:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4533d5-2eba-85a2-c54b-00008de962c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/i","pattern":"[url:value = 'http://45.194.25.221:36557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167238fb-7719-9bd5-6a2e-0000e4737562","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/bin.sh","pattern":"[url:value = 'http://39.89.94.52:43636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad96e195-ca11-0f33-dae5-000051a7cbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/bin.sh","pattern":"[url:value = 'http://212.164.115.235:52521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bdcbd07-1448-9eb5-f504-00002f371d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/i","pattern":"[url:value = 'http://39.89.94.52:43636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ffe2ab-6aa8-a761-bfe7-0000601189f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/i","pattern":"[url:value = 'http://210.208.111.2:53561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7461b67-3941-3d5f-9adb-00008f67b7e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/i","pattern":"[url:value = 'http://182.119.15.73:52944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35843c0c-6770-20f6-be1b-0000644a8239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/i","pattern":"[url:value = 'http://212.164.115.235:52521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b199f08-f87d-ccc4-787b-000068d72a48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/bin.sh","pattern":"[url:value = 'http://112.226.200.149:34560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dd596e-a851-eaf3-6b85-00002524ebf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/i","pattern":"[url:value = 'http://112.226.200.149:34560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6594a6fd-2aac-3d9f-c451-00004655e97a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.17.244:47351/i","pattern":"[url:value = 'http://123.12.17.244:47351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac28673c-0f33-69bd-b53e-0000c60e0c6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53fd8bf-63b1-a06a-d5b4-0000c5f39e4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/etc.exe","pattern":"[url:value = 'http://178.16.54.109/etc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc80f0-836b-707d-2127-0000e8e3205b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.54.164:35591/bin.sh","pattern":"[url:value = 'http://175.146.54.164:35591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7273a15-435b-eaff-916f-00006e384fd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/bin.sh","pattern":"[url:value = 'http://115.63.8.145:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac82399e-9630-cd98-ac7e-00000ec9bf4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/bin.sh","pattern":"[url:value = 'http://42.53.241.188:49853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b3b4c0e-e38f-996a-b5d3-0000132f81f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/bin.sh","pattern":"[url:value = 'http://115.48.37.12:47625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3efcb7-fbbc-242e-dd18-00004d0f1eef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/bin.sh","pattern":"[url:value = 'http://125.41.72.148:43605/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae58635-e070-21eb-23f2-00006b6f4bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/i","pattern":"[url:value = 'http://115.63.8.145:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e3223a-6045-7299-b8a4-0000433bd0de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/i","pattern":"[url:value = 'http://222.141.22.9:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a5da49-0d26-50c7-6456-0000565689fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/bin.sh","pattern":"[url:value = 'http://210.208.111.2:53561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5517ccf-2c58-76da-ed15-0000f163c3ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f80b7c69-fde3-7e88-8681-0000a7285a8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd439fc-3ed2-a0ed-2154-0000c7925452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb3d788-4958-675c-2ff7-00008741bec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/bin.sh","pattern":"[url:value = 'http://27.37.101.72:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca01b384-0fad-eb39-15a5-0000aaa53bd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/bin.sh","pattern":"[url:value = 'http://175.148.157.219:53297/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97a3744-90b7-9222-f3a0-0000a332585d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/i","pattern":"[url:value = 'http://175.148.157.219:53297/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c87b241-b30a-554e-2791-00002001787c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.91.36:41931/i","pattern":"[url:value = 'http://119.165.91.36:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef65f483-6446-834a-396a-00005a0d51f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.155.7:34948/i","pattern":"[url:value = 'http://119.189.155.7:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca8e376-d05f-8fde-4d6f-00000954da75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.sh4","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9628aae4-edac-9de6-2feb-00003bc0c1dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944830ef-940d-87b0-5265-0000f1892df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f6bd07-53fd-8fc4-efc9-0000f48cd4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86_64","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc308eb-789b-b671-bf35-00009b756350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm5","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbcbf78-d107-c23e-29dc-00000f1e312d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.spc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fa0121-9be1-ed5e-7796-0000898a4383","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.ppc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53cd69c7-418f-6459-bba1-0000317cabdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm7","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719087e3-d316-8c68-a78f-0000db1fb6ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9947ad-0e43-bbd5-cd07-0000133d7974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.m68k","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5121fdb3-2dab-17f1-5813-0000de158a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.i686","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b5737b-36e3-feab-780b-000013cbafae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mips","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3267b5b2-ba98-58f7-615b-000078c8c1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mpsl","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ca5951-8c87-b98c-ba14-000089c0ccbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm6","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af86d14c-85c9-b8e8-be7c-0000110ee3ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp.exe","pattern":"[url:value = 'http://196.251.107.186/clp.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f629fec8-a2e5-b70f-72d6-0000a347d6ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/get.sh","pattern":"[url:value = 'http://103.77.246.150/get.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80426e6-485f-bd51-4030-00009daaae49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/zs64.exe","pattern":"[url:value = 'http://196.251.107.186/zs/zs64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cac3fb-7d1f-257f-0c2b-0000d68176f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/3.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00511b1-3427-17ee-4e5b-0000135906a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/144.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d08568-a3c9-8c48-feb1-000072956184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.8/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01cff90-5f72-7198-7f36-00008e405c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884bc92e-097f-475a-f06d-00003d93dad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.28/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81773290-7e5f-3d72-deb1-00002a744d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3174c9a-0f03-2ec9-03ba-0000dbedfdf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.107/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c8009d-760b-7f5d-eaea-0000940224ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35378c31-03c4-0994-5034-0000fe54b874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/i","pattern":"[url:value = 'http://36.88.136.194:37137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4d9371-4582-cbb2-5ee1-0000f344a313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/bin.sh","pattern":"[url:value = 'http://36.88.136.194:37137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf0bdf04-c373-872a-2956-0000620dede5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/bin/support.client.exe","pattern":"[url:value = 'http://104.249.10.175/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323edc9f-a088-1368-9bd4-0000eed52de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc87503-a97d-b68c-a2a0-000031c73c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633b7b8a-cb16-df4e-ff29-000065149282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.25/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c95abc-fe94-2c78-85b9-00009ade8d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4beab2d-c92f-9ed3-78f0-0000a5c96b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/i","pattern":"[url:value = 'http://182.126.80.97:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e9b468-cfad-bad7-94eb-0000ebcdee61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ca2e31-845e-44e2-c607-0000a169e893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/bin/support.client.exe","pattern":"[url:value = 'https://104.249.10.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8975431-de1b-8848-33fd-000061635446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.141/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64f2279-8372-dba0-26f8-0000ee870c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30efdb44-38e4-cbb0-cf79-0000d19c83bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.162/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0cb30b-3661-3f1b-f1e1-00003e7d1bb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35260f9a-794f-55a2-8ae5-00005167e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/bin.sh","pattern":"[url:value = 'http://182.113.219.69:59860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbe7d2a-b2e4-236e-9ba0-000077e41f65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/i","pattern":"[url:value = 'http://182.113.219.69:59860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3c51d1-de28-3210-8430-0000f4f20aa7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/Services.apk","pattern":"[url:value = 'http://94.154.43.74/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96757f9d-9b2a-6254-3217-000089758e11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/persist.arm7","pattern":"[url:value = 'http://94.154.43.74/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6703b685-d3d4-1f5b-971b-0000381ec426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/bin.sh","pattern":"[url:value = 'http://42.59.237.57:55244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eddbd29-9f99-323d-540e-00006ae34603","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/i","pattern":"[url:value = 'http://182.114.196.132:39255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823e2ff9-6b76-ce68-d007-00009d1e28b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/bin.sh","pattern":"[url:value = 'http://113.237.71.75:38677/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41401d4b-65fe-0afb-29d1-000001090a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/i","pattern":"[url:value = 'http://113.237.71.75:38677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c277c10-bc38-087f-2d56-0000ced06543","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.110.9:42389/i","pattern":"[url:value = 'http://182.127.110.9:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c33b0-091a-3031-df20-0000ea2ca255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.37.62:48034/i","pattern":"[url:value = 'http://115.59.37.62:48034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--143637ec-79e3-7c3b-4b36-00000b3359d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/bin.sh","pattern":"[url:value = 'http://182.114.196.132:39255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec4d5e-a7ee-eebe-1091-00007e3fd95c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/bin.sh","pattern":"[url:value = 'http://45.170.224.217:54350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184daebf-340b-d0c5-a8cc-0000029d50d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/i","pattern":"[url:value = 'http://45.170.224.217:54350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df89fa8-c42d-d9b4-fed2-000066a2a5d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.169.99:44901/i","pattern":"[url:value = 'http://115.50.169.99:44901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1293e3-dea8-fd04-4a92-0000f60783f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/bin.sh","pattern":"[url:value = 'http://123.14.176.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b8846a-7210-7bfe-515a-00002b636d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/i","pattern":"[url:value = 'http://123.14.176.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f0eb01-07c4-2acd-dc71-0000f583f751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie_sh4","pattern":"[url:value = 'http://103.226.250.88/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a140b488-46ad-46e2-540a-0000ed25251b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_sh4","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1874269-4704-7aa8-efbc-000002e38ed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86_64","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41256df-6b71-3ae8-5370-00006dfbbced","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_ppc","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f170e1-3a6a-afef-1ec6-0000b9d344d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_m68k","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea26e1d-275e-f461-1f75-0000232ef11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm6","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a55e8b-2a86-5f9e-a6d4-00009b92967b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm7","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c78d01d-717f-319f-ce15-00003f6e4980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ab3fa7-ec54-a7fd-0fdc-0000319b5ef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm5","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a06711-f67a-2692-a845-000015f8d298","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c33b67-32fd-98e4-dc25-00008731e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie.sh","pattern":"[url:value = 'http://103.226.250.88/onie.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680f82fe-3dbf-a380-1307-0000d226fc44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mpsl","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd4437-9e1e-1ef1-d8c4-0000b925920e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mips","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3e8198-564a-2b86-980d-0000e48f18a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.24:55996/i","pattern":"[url:value = 'http://175.148.156.24:55996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7980f-6376-1290-2656-000078dc7508","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79cacbcc-aca1-40a3-5242-00003f7c0fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11adac4a-0930-e337-e970-000023ae6119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.233/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4a394e-1fd4-a7b6-3f05-000016ffc0cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.233/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5da7be-dc31-14d9-c788-0000cf2a91f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.233/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073bbdd9-c4f1-f510-1620-0000964e72c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfca94e-7905-9e8c-30a0-000045bc5cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464edc8b-3138-450c-821c-0000a5ff570d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.233/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d1fa8d-7243-de00-217a-0000021c2668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe7293f-a19b-ad5d-fc0d-0000a1690f9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mips","pattern":"[url:value = 'http://176.65.139.233/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cb1de9-830c-464b-af76-0000a19fd946","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.233/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ca70dc-b071-5387-dab5-0000246bdb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.arc","pattern":"[url:value = 'http://176.65.139.233/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a369f4-fb2c-c586-168e-0000bd5bbcfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af77399-02e7-f57b-b1f6-0000217f8b21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.i486","pattern":"[url:value = 'http://176.65.139.233/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024724a8-84ef-70ab-9558-00003a4d7ce1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/a.sh","pattern":"[url:value = 'http://176.65.139.233/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dcb422b-b138-a199-57f2-00000e97da9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/bin.sh","pattern":"[url:value = 'http://42.230.30.16:36416/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f6ae85-a79a-62a6-07bf-000077d25a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/i","pattern":"[url:value = 'http://42.53.241.188:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1ed4c2-6c9e-8d25-b959-000079063ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.194.151:33197/bin.sh","pattern":"[url:value = 'http://124.94.194.151:33197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34983501-bac7-9f69-12cc-0000a951f66d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8722997249/utRRFWX.exe","pattern":"[url:value = 'http://62.60.226.140/files/8722997249/utRRFWX.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3716d1ea-93f3-fe47-4f1b-00003cf451e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.162.199.149/uploads/cl1786993325592.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669466-e823-adba-701c-000009d079d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/bin.sh","pattern":"[url:value = 'http://180.191.122.115:57936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd49685-da3e-d98b-52ef-0000b52da72b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/i","pattern":"[url:value = 'http://180.191.122.115:57936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368c1f7b-8f92-da11-72b0-0000858603bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/bin.sh","pattern":"[url:value = 'http://210.208.110.51:48541/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b62c3a5-9597-400c-4bc6-000068ae5e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/bin.sh","pattern":"[url:value = 'http://123.189.139.234:49221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0702f57f-4223-2a4f-345c-00002c1e1e10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/bin.sh","pattern":"[url:value = 'http://125.44.52.238:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4521ab-0577-a134-5d53-0000ab72572c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.188.143.100:53340/i","pattern":"[url:value = 'http://14.188.143.100:53340/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a73f4b7-22bd-5a6e-5b76-00008dbba94e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/i","pattern":"[url:value = 'http://42.230.218.53:49708/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c207be20-614b-67c5-e1b6-000028191519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/i","pattern":"[url:value = 'http://115.48.150.119:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8ca9df-f1d5-f44c-8bc7-0000e968ff34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/i","pattern":"[url:value = 'http://210.208.110.51:48541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8c8f9c-7f44-f429-f14b-0000586a4f3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/i","pattern":"[url:value = 'http://125.44.52.238:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112f5ee5-9855-991e-9703-0000d4b61a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8714097194/VicVgdL.exe","pattern":"[url:value = 'http://62.60.226.140/files/8714097194/VicVgdL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6fd406-e8c8-70ec-77bd-0000c8a24532","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/i","pattern":"[url:value = 'http://123.189.139.234:49221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ee2dd8-afcf-0de1-ef36-00001074b4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/i","pattern":"[url:value = 'http://182.117.76.70:54885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf571c83-33c9-bde2-96a4-0000047d79c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/bin.sh","pattern":"[url:value = 'http://60.18.25.174:34688/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799c65a1-fb4f-3bf7-5a36-0000cdff320d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/y","pattern":"[url:value = 'http://154.90.70.23/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c3fe37-fba5-61b5-18f0-00005d00e9da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/bin.sh","pattern":"[url:value = 'http://36.36.197.26:60794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c70e69-a482-a246-4975-000028f3cf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/bin.sh","pattern":"[url:value = 'http://123.13.83.90:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270adbb9-e84e-ded0-7c9f-0000bce075dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/bin.sh","pattern":"[url:value = 'http://115.50.6.146:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d1bfdc-4eb3-adcc-6d4b-0000e26cd91d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/i","pattern":"[url:value = 'http://123.13.83.90:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81efb0d1-df1c-1f5a-a138-0000ac4d4b79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/i","pattern":"[url:value = 'http://60.18.25.174:34688/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66db52aa-a461-f627-18f6-0000b915a9f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.5:47999/i","pattern":"[url:value = 'http://42.224.101.5:47999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79fa513f-5c56-860a-976e-00002589906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/bin.sh","pattern":"[url:value = 'http://42.235.36.124:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1cb75c-f783-c03b-27fd-00002e55f6a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/i","pattern":"[url:value = 'http://115.50.6.146:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b73513-ead8-14ff-17f8-00001d22bcd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/bin.sh","pattern":"[url:value = 'http://179.108.89.220:33758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b39b13-f471-1627-536a-00002acbe9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/bin.sh","pattern":"[url:value = 'http://61.137.195.76:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377d5b1-a5ca-b586-9189-000002c404df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/bin.sh","pattern":"[url:value = 'http://115.57.84.167:36341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff189c4-309e-2518-423f-0000422b9ae5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/i","pattern":"[url:value = 'http://115.57.84.167:36341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a9dafc-2b15-89b4-5fa2-00009c75f94b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/bin.sh","pattern":"[url:value = 'http://27.204.195.189:48250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e027f2e4-6ffe-1417-ef4f-0000d91d0b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/i","pattern":"[url:value = 'http://219.156.62.179:56519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d126dd-b673-a63b-9937-0000432d82af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/bin.sh","pattern":"[url:value = 'http://219.156.62.179:56519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d3ba277-e2aa-5e6b-d1b3-000088f20c49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/i","pattern":"[url:value = 'http://27.204.195.189:48250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c309bbf1-23e9-4cc5-8110-00003e9d935d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/i","pattern":"[url:value = 'http://179.108.89.220:33758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f106c33f-cd6a-ce8b-db68-0000d2f5c64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/i","pattern":"[url:value = 'http://124.131.167.151:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56798f83-3d10-1429-d486-000082c7ad3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/bin.sh","pattern":"[url:value = 'http://115.48.150.119:50908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76299329-c213-9c09-2cd0-0000db347902","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.178.37:40893/i","pattern":"[url:value = 'http://61.52.178.37:40893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb701616-49f4-26cd-b397-0000a0405e3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4c6cbc-a507-c32c-349a-00008e106b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.178.134:49781/i","pattern":"[url:value = 'http://105.225.178.134:49781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b0ba4d-513e-1772-6b50-0000597faed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/bin.sh","pattern":"[url:value = 'http://123.12.154.116:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9dc022-eae0-27f3-b743-00008afbefa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/i","pattern":"[url:value = 'http://124.6.168.74:46806/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea2d499-5708-865d-4751-0000db380440","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/i","pattern":"[url:value = 'http://123.12.154.116:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73332173-7bde-7ab8-b68a-0000918ee721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/bin.sh","pattern":"[url:value = 'http://42.224.197.166:47521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9726233-73de-550a-c2dc-00003b9b07ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/i","pattern":"[url:value = 'http://42.224.197.166:47521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b9ca964-1c24-f146-bdd8-00003dd4fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.38.148:40790/i","pattern":"[url:value = 'http://113.221.38.148:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e834aa-e61f-b9c3-38a1-0000356204f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/bin.sh","pattern":"[url:value = 'http://175.150.250.245:59676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee07809-1c16-b195-0621-0000bc4b6fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.136:45066/i","pattern":"[url:value = 'http://182.117.68.136:45066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb29f73a-e494-efeb-d8bb-0000c4c5ca35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/TispciphraLoader.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/TispciphraLoader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292d02e8-1b0c-13d7-dfd2-0000246efa68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/i","pattern":"[url:value = 'http://175.150.250.245:59676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3435b3fc-4902-88e1-38b7-0000d1f3f676","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/bin.sh","pattern":"[url:value = 'http://180.190.85.135:37478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7015996-1fce-3307-c7fb-0000119657b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/i","pattern":"[url:value = 'http://219.155.195.226:55894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e134b516-eff5-fb3a-889c-000054db34c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arc","pattern":"[url:value = 'http://45.133.74.161/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3542f1d-1b73-db9c-8141-00009e92d8ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86","pattern":"[url:value = 'http://45.133.74.161/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e5729c-f4be-ed7e-f98e-0000cd1609bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/i686","pattern":"[url:value = 'http://45.133.74.161/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b677bad-08ca-3784-da7b-00003acbdf40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/pay.xml","pattern":"[url:value = 'http://45.133.74.161/pay.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aed481f-ad31-0010-c08c-00000517fa71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86_64","pattern":"[url:value = 'http://45.133.74.161/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770ed67e-0a16-40f6-7353-00009ac34f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm6","pattern":"[url:value = 'http://45.133.74.161/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--068c9811-9361-e603-fc62-0000b40443f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm","pattern":"[url:value = 'http://45.133.74.161/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca0a08a-aa4a-560d-c648-00006005c435","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/spc","pattern":"[url:value = 'http://45.133.74.161/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0009e6e8-8bc5-e1e0-f8f4-0000227f2878","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm7","pattern":"[url:value = 'http://45.133.74.161/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a4e8c4-b01a-3dd3-8f16-000025cc6550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/persist.arm7","pattern":"[url:value = 'http://45.133.74.161/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d471fc54-3cf2-ad35-f3f0-000000c82c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mips","pattern":"[url:value = 'http://45.133.74.161/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a33a9d-b76b-45d9-3d6c-00006bcb4247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mpsl","pattern":"[url:value = 'http://45.133.74.161/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985dc882-24d3-d069-1f68-0000003efad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/m68k","pattern":"[url:value = 'http://45.133.74.161/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0787c4-096f-6990-2060-00008876e0f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm5","pattern":"[url:value = 'http://45.133.74.161/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb4fc84-c27d-d508-f84a-0000664f2f6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/sh4","pattern":"[url:value = 'http://45.133.74.161/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee61ed3-e4b8-2635-3931-0000e691b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/ppc","pattern":"[url:value = 'http://45.133.74.161/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b530c37f-5002-02f8-f2c2-00006dd5de57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/i","pattern":"[url:value = 'http://180.190.85.135:37478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dedc688-0dd1-778d-bb85-0000584be1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/Services.apk","pattern":"[url:value = 'http://45.133.74.161/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba2d757-c2ca-a8c6-325f-00006b24ec3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:52495/i","pattern":"[url:value = 'http://117.146.92.46:52495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d38c62-9d50-b04a-1bc1-000037c90ecc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/bin.sh","pattern":"[url:value = 'http://162.255.251.91:37737/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95643844-6c74-81c4-d1a1-0000dea5799d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/bin.sh","pattern":"[url:value = 'http://182.117.76.70:54885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82485bef-33b1-e68a-2bf7-000077809f8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.156.30:49683/i","pattern":"[url:value = 'http://115.56.156.30:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d416d46-77d9-7071-b7ad-000051e9d00d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/bin.sh","pattern":"[url:value = 'http://221.15.8.180:46594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb18424-1d9f-7e89-cb94-000028bb75eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/i","pattern":"[url:value = 'http://221.15.8.180:46594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c41e55-be09-283b-b56a-0000d6499014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/bin.sh","pattern":"[url:value = 'http://123.11.72.60:34472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1132202-2816-3f7a-2e1a-0000d4fe968f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/i","pattern":"[url:value = 'http://162.255.251.91:37737/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50480f4c-b9a2-6a8b-bd3c-00007269e437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/i","pattern":"[url:value = 'http://123.11.72.60:34472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cd86-409d-43a4-830f-0000ec490e8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/i","pattern":"[url:value = 'http://42.237.34.160:35437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae573e15-053e-9c10-a7d9-00005a51fbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/i","pattern":"[url:value = 'http://182.126.119.188:36580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f12b56-bbaf-9fb8-218f-0000208d288a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/bin.sh","pattern":"[url:value = 'http://182.117.179.242:55011/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2b82ca-d71d-619e-54b0-0000cd4755cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/i","pattern":"[url:value = 'http://182.117.179.242:55011/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6820f255-a334-c46e-359a-000083e50a6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/i","pattern":"[url:value = 'http://112.198.239.2:34176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d0a153c-b06f-f90a-e023-00000e67561d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.21:54646/i","pattern":"[url:value = 'http://210.208.110.21:54646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e1e527-37ac-99ed-8497-00003d70c015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe","pattern":"[url:value = 'https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6ac4eb-9ede-cb0d-5e46-00005330e04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.38.203.20:51099/i","pattern":"[url:value = 'http://39.38.203.20:51099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe959b-3ec2-326b-eb92-000025dff200","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58a6a58-dafb-c090-2564-000004a6d360","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b566e4-3470-bafa-7b24-0000d231b6b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.mixierealty.com/wp-content/bin.exe","pattern":"[url:value = 'https://www.mixierealty.com/wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50c586-503f-96a3-87f5-0000cc2850ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://bserail.com/cabin/Diocle.emz","pattern":"[url:value = 'http://bserail.com/cabin/Diocle.emz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25aa73f-b4c3-9bfc-31b5-0000b1b97505","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836aeee0-ebd2-5c77-f7d2-0000300ec3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b6da97-6541-d841-d02a-000055ffd0f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/huawei","pattern":"[url:value = 'http://31.77.227.102/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7876738e-0dc0-2097-f26e-0000a2a98d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/bin.sh","pattern":"[url:value = 'http://123.4.243.157:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302a019a-80f4-c5c3-024d-0000c652802f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab83b64-ff4b-22dd-369e-000042a0f28e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.spc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58fe853d-7577-49c8-4d63-0000c4348020","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2687ed79-4a4c-19af-9a65-0000375a8d75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dac676a-ba93-be3a-58d8-000044ea19d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9235020-7fa2-7d65-3726-0000d4e72fc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df791f66-c316-a886-337f-00005caf35e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472d310c-3628-f6fa-3aca-00007eeee74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2298f84-5410-e499-bd12-0000ece3eae8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.spc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdb6caa-8c61-c972-448b-0000f8d0b290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.m68k","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098123ec-7937-8426-786a-00007098a8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm5","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60b66c2-b4d4-29a1-694b-0000c22812ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86_64","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78f42c0-a1d4-0d9d-64bc-0000da91603f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm7","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3805b71f-20dc-c3de-c990-000038e26d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86259eb5-d64f-8aab-771a-000093250a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mpsl","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dd38a-cdc8-f62b-ba2e-0000eaa901b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.sh4","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd0013-a330-89a4-909b-00001274f633","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06f31dd-8f28-9243-0888-00006a779846","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.ppc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90887256-1f87-fe96-773b-0000622d075a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm6","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f7587c-a901-d41d-dcbf-0000f826644a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mips","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85526f7-f606-d813-c6af-00009c22066c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.aarch64","pattern":"[url:value = 'http://31.77.227.119/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce00a23-088e-f0ea-6ea0-00009498b779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.powerpc","pattern":"[url:value = 'http://31.77.227.119/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--429021c6-86eb-f57d-65b4-00001dc429b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mipsel","pattern":"[url:value = 'http://31.77.227.119/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6157d3-e661-fae4-bd6d-0000b4f654a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv5l","pattern":"[url:value = 'http://31.77.227.119/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff87a98-5d90-3aa0-51db-000061c0477b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.arc","pattern":"[url:value = 'http://31.77.227.119/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5f9ebc-3f18-b830-2546-00002c24a9f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mips","pattern":"[url:value = 'http://31.77.227.119/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff63ba1-c5f8-83ec-d0f7-000044a0ca87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.x86_64","pattern":"[url:value = 'http://31.77.227.119/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257a6692-fbbd-ff6f-bd59-000089967d16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv4l","pattern":"[url:value = 'http://31.77.227.119/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174c0410-fe71-16bb-cd18-0000f3562e76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv6l","pattern":"[url:value = 'http://31.77.227.119/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--328eb6a6-aebe-f72d-938a-0000911cc357","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sparc","pattern":"[url:value = 'http://31.77.227.119/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b4fc41a-c5fa-26f6-e21f-0000ac322d48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.i486","pattern":"[url:value = 'http://31.77.227.119/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273aa6a-8d2b-8fed-5d9b-00002cd27f2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.m68k","pattern":"[url:value = 'http://31.77.227.119/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9578330a-b6c7-515c-fb4c-000053545cd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sh4","pattern":"[url:value = 'http://31.77.227.119/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5879b237-fd53-16ba-a486-00002a78b341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/bin.sh","pattern":"[url:value = 'http://115.49.73.173:58794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9961c0a-88f9-7f86-6335-000006faabed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/i","pattern":"[url:value = 'http://116.2.60.14:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07bad22-2226-f2c4-28fc-000013c1bdc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/bin.sh","pattern":"[url:value = 'http://105.225.137.62:54095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7fe96-8ba6-88e3-5e16-0000d2d26bac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/i","pattern":"[url:value = 'http://123.4.243.157:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469a6a3c-d55c-46dc-c59d-000056cfa06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/i","pattern":"[url:value = 'http://105.225.137.62:54095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c592e2d-9378-27dc-e3d8-0000dd53703d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/bin.sh","pattern":"[url:value = 'http://182.119.7.9:33286/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104bbcfd-b366-7459-9694-0000e014dc91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/i","pattern":"[url:value = 'http://182.117.48.159:45678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f349a6-cebc-4889-4b70-00002c8c3364","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/unifi","pattern":"[url:value = 'http://31.77.227.102/unifi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c18c58-94b1-e0d9-2228-0000ed8c1f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/bin.sh","pattern":"[url:value = 'http://222.139.104.173:42207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00fc09a-a626-fcf4-ab1e-00005fb7b297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/bin.sh","pattern":"[url:value = 'http://222.141.107.55:60545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2c8424-6117-b0ae-5834-0000a6059a52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update","pattern":"[url:value = 'https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e07839b-f5d5-73ff-10ea-00008bfa4cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.163.254:48146/i","pattern":"[url:value = 'http://115.201.163.254:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7116de6b-245f-60dc-60a6-00005b9b3cde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.227:39666/i","pattern":"[url:value = 'http://115.48.147.227:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--418ef35d-4dc3-0eaa-632a-0000a583e455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/i","pattern":"[url:value = 'http://222.141.107.55:60545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c3eb02-6816-3c53-8e28-00004815286c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/i","pattern":"[url:value = 'http://182.119.7.9:33286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e1b726-7690-a902-a328-0000b43f958e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/i","pattern":"[url:value = 'http://222.139.104.173:42207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e2c6bf-a4e4-7a12-b39e-0000e9d00fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/i","pattern":"[url:value = 'http://42.235.36.124:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bef9eb-7ec9-ea09-b1cf-0000b866be60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.22.127:45156/i","pattern":"[url:value = 'http://42.53.22.127:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16030dfd-bc24-596e-55d4-000065cd8acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/bin.sh","pattern":"[url:value = 'http://109.171.67.100:40657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a701b52-634b-3606-ecb7-0000627d05dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/bin.sh","pattern":"[url:value = 'http://116.2.60.14:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a8bfe4-934b-ebe5-d6dc-0000e1cda417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/bin.sh","pattern":"[url:value = 'http://117.208.42.53:55830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82806918-92cb-878c-64c2-0000bfc4e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/i","pattern":"[url:value = 'http://117.208.42.53:55830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1c05ed-7ad4-76ae-584d-00003c3aaeab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/i","pattern":"[url:value = 'http://196.189.98.77:59901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027fc31c-179c-a3e7-4ddb-0000c127f798","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/bin.sh","pattern":"[url:value = 'http://200.115.102.246:58251/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bed5709-dab9-ab3a-559c-0000d0e62bfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/bin.sh","pattern":"[url:value = 'http://123.129.132.69:54242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e62829d-9a04-e736-9046-0000abb4943e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/i","pattern":"[url:value = 'http://109.171.67.100:40657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a19fcb-4631-3b9d-d4fd-00003e8439b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/i","pattern":"[url:value = 'http://200.115.102.246:58251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--878085a9-e7ad-ecd3-8daa-00008993cce8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.69.200:37705/i","pattern":"[url:value = 'http://123.11.69.200:37705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5717dd10-d030-d6ff-e9bd-00005f15d81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/bin.sh","pattern":"[url:value = 'http://37.54.31.40:58523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11ae97c-9129-6e37-13d6-0000db4365a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/i","pattern":"[url:value = 'http://37.54.31.40:58523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b16e9110-458c-8c6a-e023-00002a00116b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/bin.sh","pattern":"[url:value = 'http://219.155.195.226:55894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb991b7-4be1-bb82-db9f-0000ee801de7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.219.43:42748/i","pattern":"[url:value = 'http://115.55.219.43:42748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d08f91-a786-a1a2-1f67-0000326fc1fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/bin.sh","pattern":"[url:value = 'http://118.34.109.121:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee71ed1-0e07-b8fb-c6d9-000092125203","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/bin.sh","pattern":"[url:value = 'http://219.155.104.55:50766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8c80dd-c9bb-ee34-90f2-0000aeaab442","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/i","pattern":"[url:value = 'http://219.155.104.55:50766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4950e2ac-b136-9839-bb69-000023372179","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/bin.sh","pattern":"[url:value = 'http://42.232.225.154:44359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7dc4e1-ee54-d9a1-9ea2-0000dd74e0f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/i","pattern":"[url:value = 'http://118.34.109.121:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b322a444-3733-f87b-7e3d-00009cee5808","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json","pattern":"[url:value = 'https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d625fd68-0f80-aa1e-065c-000058a49457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/mips.sh","pattern":"[url:value = 'http://103.77.246.150/mips.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9127dcbc-21ee-803b-f833-0000b0b57d33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://qorvi.pro/fdab9755.exe","pattern":"[url:value = 'https://qorvi.pro/fdab9755.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0dcfa8f-1da9-0503-5149-00007f298e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/i","pattern":"[url:value = 'http://42.232.225.154:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883c48e1-38f2-acf5-d07f-00004b99463b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.49:47422/i","pattern":"[url:value = 'http://182.117.68.49:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--656d1d86-0253-5167-66ec-0000dda15300","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/react2shell.sh","pattern":"[url:value = 'http://91.92.47.97/bins/react2shell.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90522d7c-b288-e918-88d9-00000cd2be3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/gpon.sh","pattern":"[url:value = 'http://91.92.47.97/bins/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0dea03-4e77-c17d-6c02-00002c109c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.213.139.254:60192/bin.sh","pattern":"[url:value = 'http://27.213.139.254:60192/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d7d32b-5956-64ea-9f30-000072cc3d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/bin.sh","pattern":"[url:value = 'http://219.157.16.206:50901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268f5ace-b960-c370-d675-00005214d5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/bin.sh","pattern":"[url:value = 'http://38.46.30.224:41739/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--981c3cbf-0e1e-c780-740b-00005d86d9ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/bin.sh","pattern":"[url:value = 'http://115.55.232.8:44911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7f8f5b-0b40-f0f7-218d-0000e83e6c1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.168.209:49180/bin.sh","pattern":"[url:value = 'http://115.50.168.209:49180/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8702be3-5747-e01c-a1aa-000079a7a7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/bin.sh","pattern":"[url:value = 'http://125.40.3.106:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6645867-cd9d-4809-244b-00008153eab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.195.50:44549/bin.sh","pattern":"[url:value = 'http://123.12.195.50:44549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05c1b2a-ad7e-23c4-9cc7-00000a47502d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/i","pattern":"[url:value = 'http://221.15.197.170:53012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b63c454-7aea-6ca1-ac48-0000e4eee121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/bin.sh","pattern":"[url:value = 'http://115.48.144.141:59560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4008d2c0-1139-3fb7-c92d-0000d80cfc01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.223.184:51992/i","pattern":"[url:value = 'http://115.55.223.184:51992/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6dd48b-2a88-83dc-4325-0000cf41ac9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.43.84.8:46173/i","pattern":"[url:value = 'http://175.43.84.8:46173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cebc7bf-ff88-cf46-eaba-0000891786c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/i","pattern":"[url:value = 'http://189.7.90.15:36886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952299c3-ea21-94e1-4393-0000127c1d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.234:43356/i","pattern":"[url:value = 'http://120.84.213.234:43356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed0fbf5-dae9-da72-9a2d-000036e21e19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/i","pattern":"[url:value = 'http://115.50.226.58:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff36c843-6d61-767c-c118-00004a33be17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.245.135.249:57082/i","pattern":"[url:value = 'http://117.245.135.249:57082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464c80da-237f-e90a-59ee-0000308160fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/bin.sh","pattern":"[url:value = 'http://105.184.13.132:52355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2fc8db-7bda-9b85-0c2b-0000dd58ff9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.90.250:37580/i","pattern":"[url:value = 'http://182.120.90.250:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21a9de1-4f74-fb96-2515-000065dbf2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/bin.sh","pattern":"[url:value = 'http://61.137.199.253:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ad2489-3396-9e11-46b2-0000431d5ba0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/i","pattern":"[url:value = 'http://61.137.199.253:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--015887c1-dffa-1f1f-6fb4-000075696e92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/bin.sh","pattern":"[url:value = 'http://111.72.43.182:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe5eb35-ac2c-00f3-484b-0000bb3c5eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/bin.sh","pattern":"[url:value = 'http://221.15.197.170:53012/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c4c914-1f71-79f0-fa7e-0000696824ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/bin.sh","pattern":"[url:value = 'http://210.208.106.68:49665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684f11c0-c0e8-e13e-715a-0000d063ac97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/i","pattern":"[url:value = 'http://210.208.106.68:49665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4158278-e7e5-f316-eb8f-0000cafc62b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/i","pattern":"[url:value = 'http://42.85.51.157:47726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49524c-057c-ab11-94e1-00000a7bf775","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/i","pattern":"[url:value = 'http://210.208.110.221:37492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad16cf5d-d274-06dc-f4d5-000028a48630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/bin.sh","pattern":"[url:value = 'http://210.208.110.20:60687/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2fc897-7ec7-c7d3-3054-0000a4d88b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.120.245:38927/i","pattern":"[url:value = 'http://42.224.120.245:38927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01940c0-bcc9-0cf2-fbb5-0000f1cb34fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/i","pattern":"[url:value = 'http://115.50.157.21:42304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3006e521-2da3-7002-82cb-00000793cbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/bin.sh","pattern":"[url:value = 'http://182.126.80.97:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27449a3c-0cb1-510b-76db-00002318be64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/bin.sh","pattern":"[url:value = 'http://210.208.104.156:49483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581ccbf1-1b7d-4050-62c9-00007c7f0edb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/bin.sh","pattern":"[url:value = 'http://42.230.44.245:48721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812fe4aa-6688-69d9-1dc5-0000b15a9628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/bin.sh","pattern":"[url:value = 'http://219.156.20.248:59087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d752d3-263e-253f-8861-0000eb83b601","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/i","pattern":"[url:value = 'http://123.172.77.129:45661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b99ae89-9c29-952a-cd43-0000a3c5df2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/bin.sh","pattern":"[url:value = 'http://42.224.194.129:53622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d72ab9c-9049-2ca0-4463-0000f3877165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/bin.sh","pattern":"[url:value = 'http://113.239.81.215:38553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bb9b96-4444-2d74-d8a9-0000c3eeb819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/bin.sh","pattern":"[url:value = 'http://92.124.120.65:43084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f2cd4a-c4be-61c4-2741-0000a49c779f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/i","pattern":"[url:value = 'http://115.55.232.8:44911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bfdf0c2-5fd1-9997-4d74-0000b1ed6897","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.118.112:41221/i","pattern":"[url:value = 'http://61.52.118.112:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6d2f2c-da68-4fe2-a910-0000e43edf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.152:53328/i","pattern":"[url:value = 'http://42.224.101.152:53328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d230214-aa76-f95d-e5e2-00007f085d6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/i","pattern":"[url:value = 'http://123.4.132.108:50167/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01d360b-7f51-8adf-14e4-000012395733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/i","pattern":"[url:value = 'http://115.54.224.69:44752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59bd2738-39e1-0e17-274e-0000b11b8c8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/i","pattern":"[url:value = 'http://222.141.132.237:60298/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--251bee29-f865-4956-3251-000089722f6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/bin.sh","pattern":"[url:value = 'http://125.46.198.143:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e1f3c7-e3a0-8d2b-17c6-0000880aa55a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/i","pattern":"[url:value = 'http://105.184.13.132:52355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc393d9e-2f34-ad17-0ad0-00003616103e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/bin.sh","pattern":"[url:value = 'http://196.189.98.77:59901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a0b2017-5a2c-8ce0-ee60-0000ef490d6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/i","pattern":"[url:value = 'http://42.230.44.245:48721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7127421-5600-2a2c-9352-00007513a424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.219.0:36990/i","pattern":"[url:value = 'http://182.121.219.0:36990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c108fc9c-b86e-8633-7cea-0000b6ad2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/bin.sh","pattern":"[url:value = 'http://218.59.109.9:54831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae980698-27ff-97bb-cd7e-0000aff810b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/bin.sh","pattern":"[url:value = 'http://61.53.202.74:59244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06406f1a-9a71-984b-08ac-0000717e55f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/i","pattern":"[url:value = 'http://60.22.195.207:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce3a5a0-f641-0b51-dd2d-0000c77de3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/i","pattern":"[url:value = 'http://223.151.74.149:48587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603af7bb-6faf-6a3c-d062-0000a08cfaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/i","pattern":"[url:value = 'http://180.191.230.61:39051/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbaa136a-3eac-4015-50c9-0000e6da00f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/i","pattern":"[url:value = 'http://182.116.55.50:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dd8e59-9f67-ec0a-e45c-0000ca794bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/bin.sh","pattern":"[url:value = 'http://42.85.51.157:47726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66b56dc-5f4d-4789-0352-00004664cb4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/bin.sh","pattern":"[url:value = 'http://219.155.209.143:51886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99739bb1-765d-692a-6bb7-00006b53a247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/i","pattern":"[url:value = 'http://210.208.104.156:49483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a631269d-d432-3651-5da1-000093bdedb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/bin.sh","pattern":"[url:value = 'http://180.191.230.61:39051/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--696351d0-300e-174a-00a2-00000ee42c00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/bin.sh","pattern":"[url:value = 'http://113.236.118.216:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c05937-f69c-df2a-acc2-0000254f92b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/bin.sh","pattern":"[url:value = 'http://115.54.224.69:44752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c52d740-5430-4274-6b4a-0000cff0ab62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/i","pattern":"[url:value = 'http://219.155.209.143:51886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64789e47-82e4-c6d5-7117-000030bf8015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/i","pattern":"[url:value = 'http://61.54.43.35:53946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd9044d-3faa-14cf-1d38-00001757f4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:59953/i","pattern":"[url:value = 'http://41.201.226.25:59953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39df35a3-219a-fa14-5a3c-00009b15ab5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/bin.sh","pattern":"[url:value = 'http://189.7.90.15:36886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8feef2c9-6db0-5402-6f1a-00000b30a4ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://95.165.187.102:54251/i","pattern":"[url:value = 'http://95.165.187.102:54251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f68114-845d-366e-856d-0000991fb012","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/i","pattern":"[url:value = 'http://81.227.43.128:45355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ab48f0-f172-dc52-b024-0000381689d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/bin.sh","pattern":"[url:value = 'http://115.50.226.58:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6339bf53-8bdb-9ca8-9f9a-0000a6d4ef5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/bin.sh","pattern":"[url:value = 'http://115.63.145.245:55982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4c354a-34de-5fb2-846e-00005420826b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/i","pattern":"[url:value = 'http://125.46.198.143:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f762bfba-326e-c018-e6e9-0000fc5e8c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.182.147:58870/i","pattern":"[url:value = 'http://123.14.182.147:58870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205f54bd-e99b-4b52-54ec-00001cf3fcf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/i","pattern":"[url:value = 'http://42.239.252.93:34307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb3385e-3e4a-ead5-8779-0000d7a318c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/bin.sh","pattern":"[url:value = 'http://175.167.86.22:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b3695c-7939-7dfa-df15-00007787a083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/bin.sh","pattern":"[url:value = 'http://42.234.245.232:58215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b787c907-2d59-a779-661d-000098dd2918","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.131:40429/i","pattern":"[url:value = 'http://182.121.153.131:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6796b11-df80-23b5-eacf-00004642f7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/bin.sh","pattern":"[url:value = 'http://123.97.89.239:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20493c42-8fa2-0212-d573-0000fb9b9ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/i","pattern":"[url:value = 'http://222.139.229.134:40628/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ca2318-a25d-fdbc-ee9f-0000235beb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/bin.sh","pattern":"[url:value = 'http://42.239.252.93:34307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c4abf4-9d44-1482-725d-00009741fdb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.74:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0261e5b1-e88f-96a7-5356-0000295687ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/i","pattern":"[url:value = 'http://42.234.245.232:58215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e74b1047-c1a2-9c60-39d2-00002a6f5445","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.55.19:56855/bin.sh","pattern":"[url:value = 'http://115.55.55.19:56855/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016334e0-7b6f-3df8-4c99-00003205561a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.173.127:59094/i","pattern":"[url:value = 'http://42.235.173.127:59094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85751b7b-e0da-8532-d912-0000258b8cb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.150.168:38582/i","pattern":"[url:value = 'http://61.53.150.168:38582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac30086a-48b1-64e8-e3b7-00005f36b150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/i","pattern":"[url:value = 'http://123.97.89.239:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1c8c7b-738f-8df8-c391-00002fe549ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/i","pattern":"[url:value = 'http://210.208.110.20:60687/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc7ee31-2788-c642-cee6-000014224373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/i","pattern":"[url:value = 'http://115.48.144.141:59560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d835f896-7b85-e67d-33e9-0000873e2ea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/bin.sh","pattern":"[url:value = 'http://124.131.167.151:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1350a1e-a27c-5200-41a3-00004e92e7ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/bin.sh","pattern":"[url:value = 'http://210.208.110.221:37492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9309535-1f06-3bfd-be7c-0000fc392cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/i","pattern":"[url:value = 'http://111.72.43.182:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53fc4a46-20ed-021d-f455-00003efcad37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/i","pattern":"[url:value = 'http://182.121.250.74:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b8e7c0-378c-247e-639a-0000b15c8d6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.245.119:56931/i","pattern":"[url:value = 'http://123.14.245.119:56931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa9bfe2-7e61-fae6-fea3-00009247e821","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/bin.sh","pattern":"[url:value = 'http://61.54.43.35:53946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db2cf3dd-c3bf-af6a-824c-00007c6e3d8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/i","pattern":"[url:value = 'http://92.124.120.65:43084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23f7327-a425-5340-1034-00007b001231","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.242.207:40709/i","pattern":"[url:value = 'http://123.11.242.207:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8981d19-1d5d-7962-a808-0000e639aac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.248.137:53264/i","pattern":"[url:value = 'http://115.55.248.137:53264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb569e5b-0362-3304-437b-0000f955d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/i","pattern":"[url:value = 'http://175.167.86.22:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d99cda3-490e-ed52-4e0e-0000d8cf2469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.214.107:59459/i","pattern":"[url:value = 'http://120.84.214.107:59459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc3c9174-402c-26ad-b992-0000e0bb4202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/i","pattern":"[url:value = 'http://115.63.207.26:37498/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--161a212a-59bb-74a6-4316-0000b0516a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.180.35:55889/i","pattern":"[url:value = 'http://222.140.180.35:55889/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4048ec-4f71-f60b-324c-00001af2e8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/bin.sh","pattern":"[url:value = 'http://115.63.207.26:37498/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81044243-47a9-5bef-ed55-000043889f28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/i","pattern":"[url:value = 'http://210.208.110.147:36598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b96a4b2-e49d-6987-125b-0000e1ab20d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.114.153:35365/i","pattern":"[url:value = 'http://182.116.114.153:35365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1cdeb0-6df0-fe31-53e7-00003a920f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/i","pattern":"[url:value = 'http://210.208.111.220:46346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e6f6c-687f-f7bd-f8e0-00008b080d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/bin.sh","pattern":"[url:value = 'http://123.190.18.137:43516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fe9955-cce1-d8e8-5742-00006487473c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/i","pattern":"[url:value = 'http://210.208.116.107:58255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebafd5c-e776-5ef8-d9f2-00001b765776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/i","pattern":"[url:value = 'http://125.112.59.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f4d3e9-976e-8966-3a52-000042800eeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.85.225:50581/i","pattern":"[url:value = 'http://36.69.85.225:50581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49899e-e088-1c1c-7f63-0000e6ba0aff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/bin.sh","pattern":"[url:value = 'http://210.208.110.147:36598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b587c5-f754-d1b2-9811-0000acdb58f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/i","pattern":"[url:value = 'http://182.240.9.116:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bef2322-d431-b634-1bad-000041a35f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/bin.sh","pattern":"[url:value = 'http://210.208.116.107:58255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ceeef-3b1f-b4a2-cf28-00009f8340f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.205.71:36863/i","pattern":"[url:value = 'http://175.175.205.71:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b359aa-94a6-fc01-1282-000019889971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/bin.sh","pattern":"[url:value = 'http://105.184.213.168:46781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaba294b-fe41-20d8-9f99-0000e74be21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/i","pattern":"[url:value = 'http://219.157.16.206:50901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c5365b4-0eab-1b43-9e8d-0000dcc98ce2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/bin.sh","pattern":"[url:value = 'http://60.22.193.90:43235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e5a0d7-9cf4-7a7a-30c2-000002d7cc24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/bin.sh","pattern":"[url:value = 'http://42.239.149.237:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6caf3f7-1bce-7f0c-fd55-000000ddb9dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/i","pattern":"[url:value = 'http://38.46.30.224:41739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fac8baf-bc00-5ed4-9f59-00002145f1df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/bin.sh","pattern":"[url:value = 'http://210.208.111.74:34826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1e12b6-abf9-3d9a-87a2-0000b75e8ac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.143.124:45357/bin.sh","pattern":"[url:value = 'http://117.223.143.124:45357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b8fc72-29e4-68ff-bfe2-0000deb06c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/bin.sh","pattern":"[url:value = 'http://111.163.247.38:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1869d9-6011-664a-fd73-0000d17d03d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/i","pattern":"[url:value = 'http://111.163.247.38:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3304f030-dcae-729e-5c9c-0000c3cc85a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/i","pattern":"[url:value = 'http://105.184.213.168:46781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2185126e-9fc0-93da-c13c-00005319a4d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/i","pattern":"[url:value = 'http://42.239.149.237:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--839a03df-8549-9bab-b40f-000049541eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/i","pattern":"[url:value = 'http://210.208.111.74:34826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaaedc3-a315-39ef-473d-0000ba4caa2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.39:48840/i","pattern":"[url:value = 'http://112.242.56.39:48840/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c133c7bd-0797-43b1-fca0-0000029b08b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/bin.sh","pattern":"[url:value = 'http://61.53.135.208:46338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32041c85-f486-d5a8-171e-0000f29205b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.155:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7acc5d-3e43-e2bb-414a-0000478df8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/i","pattern":"[url:value = 'http://60.22.193.90:43235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1f5d11-e2ef-32a4-e3ed-00006b8fa25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/i","pattern":"[url:value = 'http://61.53.135.208:46338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf54a176-8e2d-f310-a976-00007f1049c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/i","pattern":"[url:value = 'http://182.121.231.155:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e963c1-b57c-9d76-a38b-0000f31ddb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/bin.sh","pattern":"[url:value = 'http://117.26.83.196:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c460d3-50fc-4d22-ea19-0000824da3c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/bin.sh","pattern":"[url:value = 'http://42.86.155.61:50155/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e563d6b4-2c87-8094-e1f3-000035f841fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.i686","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbd9a18-784e-595a-6728-0000d83d1a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c2203d-6391-bc83-6f65-0000382bb404","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/i","pattern":"[url:value = 'http://42.86.155.61:50155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb8d0476-2921-c0f3-8c5d-0000536f6b3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c2b4ac3-218d-4480-61c2-0000c1b533e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.76.29.161/389242390482/dlr.sh","pattern":"[url:value = 'http://31.76.29.161/389242390482/dlr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e200fe-f121-4ab1-60a4-0000052898d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/i","pattern":"[url:value = 'http://219.157.246.145:56603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b193552f-3348-8999-5b65-000069ad2f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/bin.sh","pattern":"[url:value = 'http://61.53.133.115:54046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0aa6c6-562c-8574-e320-000079dc5d07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/gpon","pattern":"[url:value = 'http://31.77.227.102/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6088f-d371-578c-5866-0000b976e407","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/hik","pattern":"[url:value = 'http://31.77.227.102/hik']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9590903-41ad-f56a-ef3f-00003545a917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/vitek","pattern":"[url:value = 'http://31.77.227.102/vitek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c64a6a6-8061-0e99-b288-00009b01da7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm7","pattern":"[url:value = 'http://31.77.227.102/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5757c380-320c-f86a-9235-0000009b1ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a640a5fc-ce7a-fb1c-f7ae-0000ed04c680","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fef34d2-2356-b0c6-e087-0000f1e4a881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mips","pattern":"[url:value = 'http://31.77.227.102/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93031da4-063b-ccea-26eb-00004c628d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507aa11b-5c21-b282-9e1a-0000e3c91ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv5l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb972e6e-57ad-d4c2-f810-0000d353acf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm7","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4961905a-b7b8-d534-e112-0000dea93555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv4l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6561a102-4942-9eef-7d63-00007a5b4dc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76dbaaa8-849e-7361-4719-000066f4163f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.x86","pattern":"[url:value = 'http://31.77.227.102/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7a9043-aefb-2b0f-02b3-0000473b6473","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401cf108-4edb-a6ee-52d2-0000e3c398e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm64","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439812f0-fdb8-346c-f947-0000c7925d98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.x86","pattern":"[url:value = 'http://31.77.227.102/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301cd53c-a5b8-6606-fe86-00003149347f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b639630-6a94-a6d2-218a-000023bdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm6","pattern":"[url:value = 'http://31.77.227.102/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb43616-b8a1-cd88-2bd8-0000a9cd7c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9158486-423d-3106-d31b-000023fc9b91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc901ef8-9adb-f6ad-399c-00006befcb91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm6","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de12b410-fb92-d067-b15e-00009b40fcf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26ac78a-0157-9ef4-00ac-0000310812f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm5","pattern":"[url:value = 'http://31.77.227.102/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55994f42-9a86-b1ad-7ba5-0000795a647f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm5","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b57f2d8-1463-471e-288d-0000a4696635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv6l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--624cc399-47b6-b9c0-4d8b-000099094f85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4cf2c1-0312-78fd-1811-00003dfb3713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2525daf-1aef-4a5d-cdce-0000ac224c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm","pattern":"[url:value = 'http://31.77.227.102/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d867783-5d44-fdde-97a1-000073a0290e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.aarch64","pattern":"[url:value = 'http://31.77.227.102/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09335b57-4a92-4022-70cf-00007b1a981b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.powerpc","pattern":"[url:value = 'http://31.77.227.102/d/xd.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb86865-58a3-1406-3564-0000d2f496cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daad005f-0c10-e374-e5fb-00003bf1f3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips64","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5344802-e106-adfa-e854-0000eee6a0ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm64","pattern":"[url:value = 'http://31.77.227.102/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81cbc1a-fef6-1221-ff57-0000b9b6de0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mips","pattern":"[url:value = 'http://31.77.227.102/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8bd70e-49ee-7fff-1718-00004afb61fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mipsel","pattern":"[url:value = 'http://31.77.227.102/d/xd.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8315d08-b095-bdc4-45a6-0000a4ae37fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc440fp","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dce7ad3-f302-c857-9551-0000d2b5b041","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mpsl","pattern":"[url:value = 'http://31.77.227.102/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2a233e-94f1-02d8-6d5b-0000bf9133ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6aaeac-bdb0-10ef-e088-0000b9f7f881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c428a9-f0ae-590d-6312-0000e38b8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm64","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471be5aa-7601-5bd5-05f6-000089f5531a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da3df21b-afff-19b5-d668-00009ae7c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc7b1459-7c3a-099f-1183-00007e622fac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.228.109.209:34880/i","pattern":"[url:value = 'http://83.228.109.209:34880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2bedf75-32a4-f1ec-81ad-00008c35a8bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/bin.sh","pattern":"[url:value = 'http://138.204.196.254:46255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c3ad78-3820-dc67-1bb2-0000b7502daa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/i","pattern":"[url:value = 'http://61.53.133.115:54046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfa5b07-678a-1501-c738-0000f51eccfd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/bin.sh","pattern":"[url:value = 'http://113.239.216.250:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c3edbd-c34c-f0b6-4dac-0000d04d36c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/i","pattern":"[url:value = 'http://138.204.196.254:46255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e22762a5-ad9e-4aff-7c81-0000d9046689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/i","pattern":"[url:value = 'http://219.157.249.227:40515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558ca742-fa79-7469-9fe4-00008220f970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/i","pattern":"[url:value = 'http://113.239.216.250:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ce8c1f-1fdb-5cb1-1766-000008e699f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.40.206:33747/i","pattern":"[url:value = 'http://112.123.40.206:33747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4811f558-1a83-c003-50e4-000095a20fe4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.x86_64","pattern":"[url:value = 'http://167.86.99.169/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89ed6a7-9b6f-25a9-18f0-0000e894d259","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.m68k","pattern":"[url:value = 'http://167.86.99.169/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe9055f-fa34-7078-41ba-000037378285","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.217.97.115/topinmsi.png","pattern":"[url:value = 'http://217.217.97.115/topinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b2e271-e805-4356-e5a8-0000e8620483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mips","pattern":"[url:value = 'http://167.86.99.169/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc8fd10-8bc9-98e7-0e7d-0000dcfd33b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp4.exe","pattern":"[url:value = 'http://196.251.107.186/clp4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75626935-175c-50ad-d0d1-0000c155b23a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3ee54d-4201-b343-501f-00006e5c4151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b917cba-4f67-7d2c-ea5d-0000383dab7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a207f576-45e6-79eb-cc54-000053a5d1b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.172.167.65:8080/s.ps1","pattern":"[url:value = 'http://167.172.167.65:8080/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c24ec80-9d86-5ea7-a76c-0000db8b0693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.99.32.48/b2f628/cronb.sh","pattern":"[url:value = 'http://140.99.32.48/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d3a466-f1ff-ab63-b7ee-00006d9d083f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.141.58.166/b2f628/cronb.sh","pattern":"[url:value = 'http://209.141.58.166/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8632ab-a20e-4475-bdf9-0000c8f08565","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/bin.sh","pattern":"[url:value = 'http://123.14.253.90:48325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a7b72ce-c963-2ead-f876-0000b5994d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/bin.sh","pattern":"[url:value = 'http://123.7.222.46:55307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae77be5-9c91-4f71-8b0a-0000a9fa8079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.ppc","pattern":"[url:value = 'http://94.154.43.227/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb599b2-5f3b-8bdb-a99d-00002924198f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.sh4","pattern":"[url:value = 'http://94.154.43.227/d/xd.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf077214-85fd-e327-917c-00006c34c01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm7","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57554a2b-5c6e-0d8c-b045-0000d1f9ee0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.x86","pattern":"[url:value = 'http://94.154.43.227/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57535c7e-43e5-2efc-acd1-00004e7512b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.m68k","pattern":"[url:value = 'http://94.154.43.227/d/xd.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21091338-15ac-961b-bf18-0000c63d0891","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm5","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7f68a8-5c3b-c690-a212-00004e83c46f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mips","pattern":"[url:value = 'http://94.154.43.227/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28dfd27-4b86-e90d-3d0d-0000fb6f7514","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeadae61-e94f-a4d1-4f6f-00002580aa25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mpsl","pattern":"[url:value = 'http://94.154.43.227/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a1c5bc-c87a-bd1e-3fdb-00002f6ef2d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.spc","pattern":"[url:value = 'http://94.154.43.227/d/xd.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8004282-9fe2-5470-5c33-0000d488a77f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm6","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15f2c-0bb2-f2d1-11c4-00004464381f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.180:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4044d42-f735-dca0-3dbf-0000c5d2e9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/i","pattern":"[url:value = 'http://123.7.222.46:55307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b327e0c-039b-3bea-e0d3-00008407b929","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/bin.sh","pattern":"[url:value = 'http://42.6.252.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82671c71-bb28-3ec7-ad78-000094e4eeed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/2.7.exe","pattern":"[url:value = 'http://196.251.107.186/2.7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--685aa78b-fe2d-cc72-6f40-000073ee2363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c244cf58-7355-4b34-6925-0000ab0a746c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.154.157:40086/i","pattern":"[url:value = 'http://42.234.154.157:40086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a6a755-acec-11d5-95d6-000040f2855e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.powerpc","pattern":"[url:value = 'http://167.86.99.169/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d701e5d7-de6c-176b-1abc-000028be51f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sparc","pattern":"[url:value = 'http://167.86.99.169/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ff8db3-7b44-cb45-34f2-000090410cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsrouter","pattern":"[url:value = 'http://167.86.99.169/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6577ef3f-ff23-c6ec-0039-0000ccc6ecda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsel","pattern":"[url:value = 'http://167.86.99.169/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b0fba8-d552-21ee-6507-00001f34c2a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv7l","pattern":"[url:value = 'http://167.86.99.169/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddbe5f4-dff5-017f-c193-000074b3922a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sh4","pattern":"[url:value = 'http://167.86.99.169/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30abcae9-6903-3385-1e08-00002254eb15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv6l","pattern":"[url:value = 'http://167.86.99.169/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--029da86b-36c3-698c-d5ac-00005894b875","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv4l","pattern":"[url:value = 'http://167.86.99.169/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b86992a-c868-8fbc-1bf3-000065f491c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv5l","pattern":"[url:value = 'http://167.86.99.169/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a2b8d7-5e78-0936-5fde-00006874803e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.i486","pattern":"[url:value = 'http://167.86.99.169/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--275bac66-a587-d2c7-4437-000046278982","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.arc","pattern":"[url:value = 'http://167.86.99.169/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183b6e82-f193-ac91-6de3-00005cb22555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/telnet.sh","pattern":"[url:value = 'http://167.86.99.169/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5d1885-0665-b13b-ac72-000084492909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/cat.sh","pattern":"[url:value = 'http://167.86.99.169/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0a9114-3f80-600f-c842-000067d61c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/bin.sh","pattern":"[url:value = 'http://42.54.159.124:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fd4992-2486-c057-8d31-0000e856531c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/i","pattern":"[url:value = 'http://115.48.163.180:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a611abaf-35b0-6e15-0fbd-000001111a85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/i","pattern":"[url:value = 'http://42.6.252.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff91d9b-d707-df5b-6f41-00003e3d34c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/i","pattern":"[url:value = 'http://123.14.253.90:48325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743711f1-65e8-633d-9796-0000ab14da22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/bin.sh","pattern":"[url:value = 'http://115.57.233.250:43213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d2c6ba-8b93-6145-7b7e-0000c9c2fd38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/i","pattern":"[url:value = 'http://115.57.233.250:43213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de48dc-479e-d9a0-703d-0000292eb3a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/1.sh","pattern":"[url:value = 'http://37.49.230.40/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--966be732-3540-6616-08c6-000018c6a93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/2.sh","pattern":"[url:value = 'http://37.49.230.40/2.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed78057-e0ac-a676-c266-0000beb1a289","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/3.sh","pattern":"[url:value = 'http://37.49.230.40/3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b72a989e-5e58-4c79-a08a-000061d81927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/i","pattern":"[url:value = 'http://42.54.159.124:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446438-1dcc-1254-bc24-0000ae2eda9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe","pattern":"[url:value = 'http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db0079e-503e-afa2-6685-000087dbf592","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'http://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff66655-055d-4c8b-2184-0000f9783242","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86_64","pattern":"[url:value = 'http://176.65.139.209/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7461510-3049-0f78-e825-0000405ae488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/w.sh","pattern":"[url:value = 'http://176.65.139.209/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1aab49f-f77a-6caa-abe0-0000b4939bd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm7","pattern":"[url:value = 'http://176.65.139.209/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb10955b-e6ba-762e-8b5a-0000851eea7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/spc","pattern":"[url:value = 'http://176.65.139.209/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc04c955-412f-7f39-b547-000083540127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/sh4","pattern":"[url:value = 'http://176.65.139.209/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92907c32-4b51-674c-1b98-0000a01cd17c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mipsel","pattern":"[url:value = 'http://176.65.139.209/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69fe9af5-9adf-a48d-89e3-000096d24977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/m68k","pattern":"[url:value = 'http://176.65.139.209/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d2ae23-36af-8347-f99a-000096249fad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mips","pattern":"[url:value = 'http://176.65.139.209/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9562b02-bacd-3dbe-677e-0000038a98d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/ppc","pattern":"[url:value = 'http://176.65.139.209/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ad8409-cc38-e228-d0a8-00000c2ffcbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm6","pattern":"[url:value = 'http://176.65.139.209/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--713cadc0-a945-c5ea-b6f2-0000511f6dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm","pattern":"[url:value = 'http://176.65.139.209/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4d5b3-5240-5beb-b698-00001e9a5353","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm5","pattern":"[url:value = 'http://176.65.139.209/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e41acc-915e-9dda-a285-00007b89f6a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86","pattern":"[url:value = 'http://176.65.139.209/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a8a269-f9f5-95a0-b678-0000f74c40d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.212/eclipse.sh","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4042b8b9-f574-9e32-c58e-00008a37847d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.x86_64","pattern":"[url:value = 'http://176.65.139.212/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa326f6-c034-05ef-26b7-0000c93e3b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.powerpc","pattern":"[url:value = 'http://176.65.139.212/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acee58a-d288-a46d-e7cf-0000470133ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv4l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9dfa5e-a36c-92f2-c602-0000f2b9a096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i686","pattern":"[url:value = 'http://176.65.139.212/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a097496-1d4d-1d0b-4dbd-00003f678520","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mips","pattern":"[url:value = 'http://176.65.139.212/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e3b649-4b58-275e-f702-000000a1493c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv7l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d5d4cb-c6de-b7fe-4626-00007a611a5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv5l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d24a2de-2ecf-afdb-d87c-0000d3536743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mipsel","pattern":"[url:value = 'http://176.65.139.212/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f88708-2e73-9284-9e2e-00003dc1608c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv6l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6254040-0cc6-3231-01d4-00003f9153fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.m68k","pattern":"[url:value = 'http://176.65.139.212/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4edb4407-fe97-43ea-e017-0000742dd238","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i586","pattern":"[url:value = 'http://176.65.139.212/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7bf6a66-add6-4713-6236-00007ce0dfcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.sh4","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b2d0a8-890a-c823-5baa-0000874a5edf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/i","pattern":"[url:value = 'http://120.84.215.27:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1331b029-66cb-58b3-7aca-000076f19650","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/bin.sh","pattern":"[url:value = 'http://81.227.43.128:45355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed99707c-0023-6121-fd2a-00000f718661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.138.107.171:58489/i","pattern":"[url:value = 'http://116.138.107.171:58489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f573dd-c7c9-7974-1855-0000b8e2cf29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.38.44:54807/bin.sh","pattern":"[url:value = 'http://125.110.38.44:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e3fb6b-ec9c-4460-5bfa-00007ebfeaf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.252.20:55570/i","pattern":"[url:value = 'http://125.42.252.20:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6ce903-8506-eaae-f8a7-00003d889e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/bin.sh","pattern":"[url:value = 'http://46.16.150.139:51622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0d2d34-174d-30c6-13c4-0000898f2e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/bin.sh","pattern":"[url:value = 'http://85.12.251.50:45018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e263a65e-8d0d-0675-b775-0000beb26d7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/i","pattern":"[url:value = 'http://46.16.150.139:51622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc7778d-e683-a974-4cd5-000078e57580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/bin.sh","pattern":"[url:value = 'http://103.160.130.178:42478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4065890-3c3f-4568-545d-000092648f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/i","pattern":"[url:value = 'http://85.12.251.50:45018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86847a8b-e950-c30f-5c32-00002613670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/i","pattern":"[url:value = 'http://103.160.130.178:42478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e26eab-9f89-fd80-21a0-000094213202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/i","pattern":"[url:value = 'http://115.49.7.198:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6215a9-a747-908a-8235-0000b6d6c56d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/bin.sh","pattern":"[url:value = 'http://60.23.239.236:48291/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15624c0b-5b12-ae69-27bf-00000753aa27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/i","pattern":"[url:value = 'http://60.23.239.236:48291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036e5113-2b8b-9776-1102-0000e3bc78ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nm/a","pattern":"[url:value = 'http://178.16.55.240/nm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba64df5a-355e-5106-1042-0000d92292e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:50791/bin.sh","pattern":"[url:value = 'http://196.190.133.180:50791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1805bd4a-211b-1578-f97a-0000a87a69da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.46.67:33765/i","pattern":"[url:value = 'http://222.139.46.67:33765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34753f0-78e9-3efc-e069-0000389cec29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/a","pattern":"[url:value = 'http://178.16.55.240/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd498db-edd8-4325-3bd9-00004d8c894f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/bin.sh","pattern":"[url:value = 'http://124.6.168.74:46806/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6cbd4a8-92fa-d011-606e-0000caff52e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.134:40959/i","pattern":"[url:value = 'http://120.84.214.134:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9173aed8-d55a-4158-9ded-00008e649056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/bin.sh","pattern":"[url:value = 'http://42.55.107.64:42203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b172d4b-35be-b8b1-72f5-00002b40f89c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/bin.sh","pattern":"[url:value = 'http://115.63.82.0:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75492de-226e-aa88-9dd6-00005c102006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/bin.sh","pattern":"[url:value = 'http://182.127.53.74:32795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd320d2-69c6-2a2b-7d87-0000f02503c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.162.214.49:58599/bin.sh","pattern":"[url:value = 'http://60.162.214.49:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487b03f1-b936-de1d-f3a1-0000ac8aa776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/i","pattern":"[url:value = 'http://42.55.107.64:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7608d0-816f-dacf-969f-000008402ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/i","pattern":"[url:value = 'http://115.63.82.0:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb29085-cd7f-b383-24b1-000047a6c4e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/bin.sh","pattern":"[url:value = 'http://182.112.34.219:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77502cee-50d2-4bf5-58c0-000005508229","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/i","pattern":"[url:value = 'http://182.127.53.74:32795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6baf6919-c9ad-8bb9-4204-000015d7b3ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.19.212.208:47835/bin.sh","pattern":"[url:value = 'http://60.19.212.208:47835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d43eead-00c8-f944-f1c7-00000afe4548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/i","pattern":"[url:value = 'http://182.112.34.219:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--571bcf40-aedd-8d57-fe16-000042ebca54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/bin.sh","pattern":"[url:value = 'http://123.4.132.108:50167/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71eeaae9-48a5-2d8d-a161-0000411f35ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nmm/a","pattern":"[url:value = 'http://178.16.55.240/nmm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f0bbf-19cd-076e-f9ff-00003fe3790e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/i","pattern":"[url:value = 'http://119.183.51.162:34711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ed5f54-9037-bab6-767d-00007c5b1cce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/bin.sh","pattern":"[url:value = 'http://182.116.36.131:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9437857-63c0-97f2-22d7-000095b69eb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/bin.sh","pattern":"[url:value = 'http://60.22.195.207:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f330dec4-ca97-a94d-29a6-00005bb2a3fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/bin.sh","pattern":"[url:value = 'http://110.186.228.173:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--479b2fd9-fc9c-e1be-1c2b-000003ef39f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/bin.sh","pattern":"[url:value = 'http://182.117.48.159:45678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed37052d-d781-6a6d-ac23-00000129c1ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/i","pattern":"[url:value = 'http://182.116.36.131:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de4c800-6e92-880f-b2f2-000050323ef4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/bin.sh","pattern":"[url:value = 'http://123.9.245.182:54119/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7ffa28-d4df-88b2-471b-0000ecc13760","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/i","pattern":"[url:value = 'http://123.9.245.182:54119/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52c32b-c76e-ae42-59c0-0000a5dc5871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/i","pattern":"[url:value = 'http://110.186.228.173:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af95808f-5745-7ba7-9118-0000a5f9e63c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/px86","pattern":"[url:value = 'http://31.77.227.134/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6df74c-3904-1f83-9c18-0000e5085b58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/bin.sh","pattern":"[url:value = 'http://210.208.111.26:55671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb3a85e-72d6-924c-8187-0000a6e2927f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/bin.sh","pattern":"[url:value = 'http://60.23.192.74:54261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363da11-9a98-dfad-2181-000046fe91fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/bin.sh","pattern":"[url:value = 'http://110.139.34.163:54048/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd17407c-56c0-9f69-8e1e-0000da371ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.129.220:50657/i","pattern":"[url:value = 'http://115.55.129.220:50657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b6b767-9660-041d-537c-00003068b6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.46.86:54016/i","pattern":"[url:value = 'http://115.61.46.86:54016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e685e54-7f85-b8c5-56a6-0000f8925a1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/i","pattern":"[url:value = 'http://210.208.111.26:55671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233713fe-2d30-19ea-37b0-0000927effca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/i","pattern":"[url:value = 'http://60.23.192.74:54261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb07afa3-b50d-446c-99f1-000098b393e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/bin.sh","pattern":"[url:value = 'http://42.237.34.160:35437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a3860c-c34c-ca2f-14d6-0000df6a71b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/i","pattern":"[url:value = 'http://110.139.34.163:54048/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c0251f-5144-11f5-f566-0000909bb3f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.146.90:36045/i","pattern":"[url:value = 'http://123.5.146.90:36045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb9a077-a310-59f1-8f30-0000b9728c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/bin.sh","pattern":"[url:value = 'http://36.26.210.12:56867/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2678a3-d1a7-d201-8ee6-00001aa3d068","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/i","pattern":"[url:value = 'http://210.208.110.130:49996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4822490-74dd-632e-57e1-0000fb3bfe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/bin.sh","pattern":"[url:value = 'http://221.14.38.136:39999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88636432-bbe7-76c8-d7d3-000006b3ea99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/bin.sh","pattern":"[url:value = 'http://78.165.96.230:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b7878c-9ee3-e915-228e-00003d9e8fb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/bin.sh","pattern":"[url:value = 'http://98.252.87.232:48523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba1a632-ca95-2984-920d-00008a15fc1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/i","pattern":"[url:value = 'http://221.14.38.136:39999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5890b118-07ae-6fc7-f6fb-0000eb92bb83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/i","pattern":"[url:value = 'http://36.26.210.12:56867/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac03dd6-0d03-785e-c6f9-00008cfe86b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/i","pattern":"[url:value = 'http://78.165.96.230:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22bb344a-2a63-1d87-884d-00006ee2d469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/2K4xFEq.bat","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/2K4xFEq.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcfb89e-8b3a-b983-63f4-0000243c2b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/dp.sh","pattern":"[url:value = 'http://194.238.57.124:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--618c5bf5-8517-7e8a-1ebe-0000fa38bf60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x64","pattern":"[url:value = 'http://194.238.57.124:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a4b554-09cc-7c0d-ec5c-0000d7cafeec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc440","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec11fca-464c-9cac-19fd-00004977aa3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sparc","pattern":"[url:value = 'http://194.238.57.124:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffb4ae4-0c7d-8b90-13a1-00007a64b1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm4","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb32699-83fc-5365-8608-00009702a7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11011757-8ffa-6741-2283-0000ef01c98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x86","pattern":"[url:value = 'http://194.238.57.124:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1c4ce-db26-1862-e5ec-000017dc3e09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sh4","pattern":"[url:value = 'http://194.238.57.124:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f52bc8-8462-6b73-2016-0000d06d794d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm6","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea63534-97bd-392b-e929-00004a90cc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.m68k","pattern":"[url:value = 'http://194.238.57.124:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f21b5e-7bc8-8e4c-89ea-000068d11e28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm7","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428a01e2-1d69-87e8-b32d-00004a661a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mips","pattern":"[url:value = 'http://194.238.57.124:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fc7a72-295b-23ba-6c6d-0000c2d8d6a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm5","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941e8f2a-2682-d828-97fc-000087b83feb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i686","pattern":"[url:value = 'http://194.238.57.124:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979a5b44-f213-571a-dd80-0000ca709ee0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i486","pattern":"[url:value = 'http://194.238.57.124:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0618431c-f300-6bb4-0aee-000029729b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mipsel","pattern":"[url:value = 'http://194.238.57.124:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad9d904c-a1cc-a5a1-e3d5-000072095444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/i","pattern":"[url:value = 'http://98.252.87.232:48523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529ef74a-d132-f8a5-f04a-0000c53184d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/bin.sh","pattern":"[url:value = 'http://39.74.33.126:60319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ba651d-58e1-bdb6-c450-0000d3b6b05e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.146.78:40164/i","pattern":"[url:value = 'http://27.44.146.78:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f916cf22-db0a-5c12-b129-00007709a909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/bin.sh","pattern":"[url:value = 'http://27.194.211.108:59780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8683c6-a3c5-afb3-6514-00007521423d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/i","pattern":"[url:value = 'http://39.74.33.126:60319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcad2f0-6896-6a05-489d-0000890dba60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.39.1:58961/i","pattern":"[url:value = 'http://125.44.39.1:58961/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97fef9e1-360f-54b1-5add-0000c32d7a41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/i","pattern":"[url:value = 'http://27.194.211.108:59780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb597bc9-25cc-f80f-8a8b-0000b474a1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/bin.sh","pattern":"[url:value = 'http://182.116.55.50:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea550ed-f8c8-f6c0-05b6-0000494b0cd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/8EiMnJ7.exe","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/8EiMnJ7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbb9ce4-a372-b4d1-1af8-0000dbda92df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/bin.sh","pattern":"[url:value = 'http://123.11.13.6:54335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31ecc05-6d2a-44b2-17c1-00006ffd2287","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/bin.sh","pattern":"[url:value = 'http://115.55.236.112:38216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be950735-b34f-1833-f40c-000019f29367","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/i","pattern":"[url:value = 'http://115.55.236.112:38216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8a9ef8-bb34-0875-b204-0000ad0eaa36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/i","pattern":"[url:value = 'http://123.11.13.6:54335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fd90cc-6a82-3574-c8ed-0000de8e2ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe","pattern":"[url:value = 'https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a092374c-47a6-707f-9d17-000003f063f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/bin.sh","pattern":"[url:value = 'http://218.13.149.41:34202/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d546336c-b05b-b08c-e3b1-0000de6ff6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/i","pattern":"[url:value = 'http://218.13.149.41:34202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac8abaa-5334-52e9-466d-0000f8d5b2a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/bin.sh","pattern":"[url:value = 'http://175.173.72.28:43930/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ddf40-c068-35d6-a95b-00001145eeb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/i","pattern":"[url:value = 'http://175.173.72.28:43930/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b002974f-68ea-96e0-bf61-00005fbef212","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/bin.sh","pattern":"[url:value = 'http://115.62.190.249:52785/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad7a1b3-25b5-af5e-d5b9-00009cc5cf82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/i","pattern":"[url:value = 'http://182.113.33.72:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f559244-2ccb-3c56-a686-0000db932dce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/i","pattern":"[url:value = 'http://115.62.190.249:52785/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b9a47b-05c2-db82-9fa2-0000d404b04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.253.62.1:52995/i","pattern":"[url:value = 'http://117.253.62.1:52995/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fbcb70c-7080-992f-efef-0000943f7b9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/bin.sh","pattern":"[url:value = 'http://42.238.169.3:40436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad604a0-3e8d-dc29-a48f-000026d2aa01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/i","pattern":"[url:value = 'http://42.238.169.3:40436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2806f6-f9ee-fb4e-ad56-000026d0450e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/bin.sh","pattern":"[url:value = 'http://175.146.159.250:58407/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b242265d-7910-d516-6b30-0000cb1e5b67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/bin.sh","pattern":"[url:value = 'http://60.23.123.119:52447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c23709-7146-7ec8-e7b7-00001eca7db1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/bin.sh","pattern":"[url:value = 'http://221.205.0.233:37221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c649340-1640-38f5-0702-0000945fb4aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm5","pattern":"[url:value = 'http://31.77.227.121/satan_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdae08b6-2d9d-0ad2-488a-0000cc12c316","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f9b26a-9892-36bf-84b0-0000a3a48dca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_ppc","pattern":"[url:value = 'http://31.77.227.121/satan_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56dc2fa-ec5b-be1c-4285-000086ea1b44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm6","pattern":"[url:value = 'http://31.77.227.121/satan_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6612e8d0-e592-bb97-ce2f-00001ce17854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips","pattern":"[url:value = 'http://31.77.227.121/satan_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6271393b-2137-b6c9-5393-0000f5ce83ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/$b","pattern":"[url:value = 'http://31.77.227.134/bins/$b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89334a8-3d7b-faa9-34e2-0000f13178a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm","pattern":"[url:value = 'http://31.77.227.121/satan_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3edc06-cd9d-ab43-77f3-00001c17ae8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_m68k","pattern":"[url:value = 'http://31.77.227.121/satan_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd8734e-a5de-1cf2-c386-0000026895a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_x86_64","pattern":"[url:value = 'http://31.77.227.121/satan_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb83ff4-2c23-9d7d-c959-0000dbdf8f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips_el","pattern":"[url:value = 'http://31.77.227.121/satan_mips_el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b26af26c-07a1-3f72-7ccf-00003e567c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm7","pattern":"[url:value = 'http://31.77.227.121/satan_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7632d6a3-a51f-fdc8-94d1-000030fd95f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sparc","pattern":"[url:value = 'http://31.77.227.121/satan_sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ab503d-8483-65b1-2586-0000237a143c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sh4","pattern":"[url:value = 'http://31.77.227.121/satan_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed971693-69ff-b9a6-7d56-000079d0f0da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/getit.exe","pattern":"[url:value = 'http://178.16.54.109/getit.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa446ab7-c6d7-0a0c-61c3-0000dac4ab65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/gg11","pattern":"[url:value = 'http://194.238.57.124:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3509753-cd25-76de-c8dd-0000cfe798cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.74.47.172:6407/linux","pattern":"[url:value = 'http://112.74.47.172:6407/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93edb27a-9e12-cea4-6ea2-0000a558fa44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd3da97-dfb9-7102-f25a-00006827451d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mips","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22d7d91b-14cb-8042-de81-0000ac48303c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7f9faa-9998-49ed-0839-000016fa671f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/i","pattern":"[url:value = 'http://175.146.159.250:58407/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f18fad-e043-936a-b5b0-00005377cd55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/ChromeReal.exe","pattern":"[url:value = 'https://c2.11179669.cloud/ChromeReal.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2a2e49-760c-d047-029e-00005b813391","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/edgeupd.dat","pattern":"[url:value = 'https://c2.11179669.cloud/edgeupd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f95805-26e1-1d45-7577-000044be1a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/bin.sh","pattern":"[url:value = 'http://88.232.49.106:60233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae844e-f43b-b054-1ecf-0000e0f3364f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/bin.sh","pattern":"[url:value = 'http://27.215.210.140:47517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9faaa1d2-046b-ec48-690c-0000fb646331","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/i","pattern":"[url:value = 'http://60.23.123.119:52447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6ab24c-a837-a247-4e70-0000f66275fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/i","pattern":"[url:value = 'http://221.205.0.233:37221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5500a14b-a40f-c9c5-d12e-00003fa5aa72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/i","pattern":"[url:value = 'http://27.215.210.140:47517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b099d78-2955-e644-8386-000013a730ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/i","pattern":"[url:value = 'http://88.232.49.106:60233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af00a491-2332-686b-0971-0000c2ccee2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.py","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3550aa9-b4be-d2ae-da77-0000c3316e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.artleadsdigital.com/payloadencrypted.bin","pattern":"[url:value = 'https://www.artleadsdigital.com/payloadencrypted.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f741699-5374-55a9-f307-00004d44c6bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.bat","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef169ca-acd8-fd4a-a763-000016cb44c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tattinamecheap.com/QuickFetch.exe","pattern":"[url:value = 'https://tattinamecheap.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c134b4a0-3bd4-fbeb-81fc-00008c138706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.2.164:47376/bin.sh","pattern":"[url:value = 'http://123.13.2.164:47376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49df976d-4bbe-4dc1-7077-00009c15ce0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/bin.sh","pattern":"[url:value = 'http://222.137.172.144:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48cb74e-914a-07cc-2495-0000c1f812b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/bin.sh","pattern":"[url:value = 'http://59.97.252.25:32934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6926b946-5f7b-31bd-d62c-0000676b24b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/i","pattern":"[url:value = 'http://27.215.85.41:50026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70f6e17-dde3-63df-d030-000086deab24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88011c5e-c9ff-0b38-ca5f-000003242b57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mpsl","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a370a82-55a7-95ef-49a1-00005495c7bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.sh4","pattern":"[url:value = 'http://18.236.12.51/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a5a107-548d-b95f-ab9d-0000e09989e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm5","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b74310-8181-2d23-9d49-00006601dc17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f65e8d5-7016-3afa-c352-0000d44b5e49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.ppc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6837a0cd-5245-164d-1954-00007bbb5933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86_64","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9abc02b-509f-99b5-0aa0-00004a904168","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm7","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eacf0bd-44df-8982-49f7-0000f22c260d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm6","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ffee41-508b-c652-c68b-000068d193c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.m68k","pattern":"[url:value = 'http://18.236.12.51/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb24f42c-4e34-2f6c-fc9c-000089f23af9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/bin.sh","pattern":"[url:value = 'http://219.157.246.145:56603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c138b81-4a16-2aa0-8a1e-00004848344b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.aarch64","pattern":"[url:value = 'http://167.86.99.169/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a30dbc-a94d-1c5a-fbc4-0000c243ce12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/i","pattern":"[url:value = 'http://59.97.252.25:32934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b377b685-d815-a409-fc48-00006f7671d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/i","pattern":"[url:value = 'http://222.137.172.144:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d14ed9c-6d2a-3caa-9f86-0000f1755dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/bin.sh","pattern":"[url:value = 'http://115.49.94.7:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d982f200-9fdb-8cc1-09c2-0000d14a2444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/bin.sh","pattern":"[url:value = 'http://180.115.85.248:45790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7ccc34-a766-408b-b924-0000e9e8ad4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/i","pattern":"[url:value = 'http://115.49.94.7:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820b0806-b7ce-a3ce-cc81-0000aff06a1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/i","pattern":"[url:value = 'http://180.115.85.248:45790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39402dbb-77ea-0199-81b3-00006b8b4f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.140:55161/bin.sh","pattern":"[url:value = 'http://59.96.140.140:55161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5ccf79-1207-599b-1d61-000081e9c0b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77150455-d14a-3540-dd3b-000097b0886d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/bin.sh","pattern":"[url:value = 'http://182.126.119.188:36580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d195cb-d0e4-93e3-09ff-0000946ea091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.47.120.247:39556/i","pattern":"[url:value = 'http://58.47.120.247:39556/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--729c76a3-7e7b-632f-7563-0000af94a7fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d18b9d5-e63f-9bad-52b8-0000595f3f8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84f2db7-2f7b-cb45-3a2c-0000f22eab7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebdccba-48bf-5401-3322-0000ee206975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6345f5-a413-bef3-59ba-00001ecc7f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94ccc25-ca84-3c3f-b8a7-0000d2d554a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73650c25-7320-e211-c102-00005b9d1b0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3a0561-24e7-40ed-10d4-00000618c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7628eff0-a65e-9187-eb67-0000ade171d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed21ed5-e576-303b-8091-0000c3a83edc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd9705-d038-3de7-a00f-00000fb115e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31fe1e7b-135f-3647-d055-0000229622ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe","pattern":"[url:value = 'https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b40353-1a9a-9667-6201-00007dadf192","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fc272b-eb41-da87-1997-0000aea0e024","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d860f36-9625-6b2d-0130-000057d3e61b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.18:32896/bin.sh","pattern":"[url:value = 'http://120.84.213.18:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f335026-20e9-666d-f770-0000cddd4321","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/bin.sh","pattern":"[url:value = 'http://222.140.156.149:50285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed6992eb-087a-4b20-2a87-000026d84b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://teakivo.com//wp-content/bin.exe","pattern":"[url:value = 'https://teakivo.com//wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0679d0e2-2dab-aa30-eff4-0000f6f14de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/litxwnimg_082224.png","pattern":"[url:value = 'https://sunix-technology.com/images/litxwnimg_082224.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44308ea1-fb6a-7501-c4cf-0000af15f7d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/MSI_PRO.png","pattern":"[url:value = 'https://sunix-technology.com/images/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7425049-3da0-ed6f-63fb-0000a9548ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/Setup.rar","pattern":"[url:value = 'https://winds11.site/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7259107-f688-c6ea-6d4a-0000d2673c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/bin.sh","pattern":"[url:value = 'http://125.41.1.44:45185/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d410851a-120e-90ac-5ebb-0000be841fb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/i","pattern":"[url:value = 'http://222.140.156.149:50285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--793d7cd0-ba66-0ecb-e01a-0000a21d0a0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaf3827-a36f-99f0-2f36-0000988217f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75cb2b60-1ba8-c3b3-e5d2-0000c66768aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/i","pattern":"[url:value = 'http://125.41.1.44:45185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe797da-f572-6540-a173-000074069eb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baileyemas.com/vlc.zip","pattern":"[url:value = 'https://baileyemas.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2e538b-cb3c-5ad6-ebfa-00005456b28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/bin.sh","pattern":"[url:value = 'http://105.184.157.90:46817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca07fb0e-efef-7050-721c-000097c4c5bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/i","pattern":"[url:value = 'http://112.232.226.68:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3205ac62-f9f7-2922-c26b-0000cdfd5db8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/bin.sh","pattern":"[url:value = 'http://115.49.28.151:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62cadd80-af38-8ef6-98c8-00005a64ceb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/r","pattern":"[url:value = 'http://31.77.227.102/r']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfd8af1-ba6f-8f89-a885-00004210a275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/jaws.sh","pattern":"[url:value = 'http://31.77.227.102/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67443ed4-117c-9821-0d72-00004e8246d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dl","pattern":"[url:value = 'http://31.77.227.102/dl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b09b55ba-3d9e-b9a8-c6c0-00009caedd05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/routerip.sh","pattern":"[url:value = 'http://31.77.227.102/routerip.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a645d6-dd0e-e3be-0028-0000cfc9b1c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/j","pattern":"[url:value = 'http://31.77.227.102/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2103cd-ead0-4683-c3f3-00000a4503bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.128.27:34669/i","pattern":"[url:value = 'http://42.86.128.27:34669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112891cc-4728-6083-f048-0000312c393a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59900/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852b410f-82fb-fdc2-2357-0000baf48512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/bin.sh","pattern":"[url:value = 'http://182.121.171.163:58015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e42f5df-27b1-9b50-a02e-000083ba02f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/bin.sh","pattern":"[url:value = 'http://60.177.244.198:55825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3ccf93-789e-72bc-0351-0000682ef4cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmips","pattern":"[url:value = 'http://31.77.227.134/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb5f17-ceee-52d8-711e-0000fa539afc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/bin.sh","pattern":"[url:value = 'http://42.58.252.41:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2debcecc-fe81-9365-fa29-00000e62eb97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.37.102.157:50864/i","pattern":"[url:value = 'http://27.37.102.157:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e839c7f-5a01-a763-1709-0000029e7d41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/bin.sh","pattern":"[url:value = 'http://66.212.173.225:35221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1f7e4-677f-a1cf-440d-0000f0b4a84d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.31.160:24414/s/linux","pattern":"[url:value = 'http://194.59.31.160:24414/s/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724a26a3-9517-8a90-32fc-00007a9f8d4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.159.117:41888/bin.sh","pattern":"[url:value = 'http://42.239.159.117:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1074f661-d5e6-2482-17ac-0000a8ed17b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/i","pattern":"[url:value = 'http://42.232.181.83:55625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc01f284-39bb-8dcc-4c56-000043c745e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.194.206:50377/bin.sh","pattern":"[url:value = 'http://60.23.194.206:50377/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f6715f-4c1e-0c08-b6d0-0000f16c33eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/i","pattern":"[url:value = 'http://37.78.12.145:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--541b1d3d-1cb9-bc85-ba37-0000adcc96c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/bin.sh","pattern":"[url:value = 'http://182.245.28.97:40240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ae7fc-2ead-1f84-10f8-0000cf9e02d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://79.135.225.50:13477/.i","pattern":"[url:value = 'http://79.135.225.50:13477/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc01576-add2-63b4-6455-000008db75d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/i","pattern":"[url:value = 'http://122.139.14.243:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66756c60-1df2-470a-2c83-000055862ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bash.sh","pattern":"[url:value = 'http://132.243.200.43/nullnet_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80610f18-a519-3577-71f9-00005b6efae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pspc","pattern":"[url:value = 'http://31.77.227.134/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fbc277-3d02-5010-a433-0000766ba5c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/i","pattern":"[url:value = 'http://115.60.200.162:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b7b821-a267-01e0-ddd1-0000b4e06ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fcd50d0-0a53-f447-b1bd-0000269193a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/bin.sh","pattern":"[url:value = 'http://39.79.195.66:54804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f10678-8b30-a084-1d97-00003274190d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152ec4-a773-6f1f-b78c-0000040a9652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.6:38860/i","pattern":"[url:value = 'http://221.15.12.6:38860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb650a14-1c9e-9778-0fc1-0000286e3394","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87493ec2-b36e-0b9a-62ca-00002898e54e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3665b8bf-d7b2-211f-0204-00002bb04dd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.61.92.78:58321/i","pattern":"[url:value = 'http://111.61.92.78:58321/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a478f628-05e6-2439-ff45-0000de10ed67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/bin.sh","pattern":"[url:value = 'http://119.178.149.31:33483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa778e6-cc11-7db2-c9ab-0000f64d2c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/bin.sh","pattern":"[url:value = 'http://115.55.59.69:53574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7f3fa-7711-5c25-fd5f-000076b456f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/i","pattern":"[url:value = 'http://42.232.236.105:33973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570e850c-0ae9-c91a-9f9f-00005c20fd94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/bin.sh","pattern":"[url:value = 'http://182.121.246.143:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab677755-aa4d-35b7-6ab4-00002da9b294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.141.218:40057/i","pattern":"[url:value = 'http://61.53.141.218:40057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e47e0a-fbda-b6f4-c007-0000ef3ab272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/bin.sh","pattern":"[url:value = 'http://125.41.109.138:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e55a76-48ad-846d-88fb-0000343ef255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2282222d-5f48-0738-ee50-000060e73413","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://72.29.46.195:43633/i","pattern":"[url:value = 'http://72.29.46.195:43633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fe5034-ef65-f9e0-8161-000037aa8a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/bin.sh","pattern":"[url:value = 'http://37.78.12.145:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ecf4763-30e3-69ac-534d-00000a0436ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/bin.sh","pattern":"[url:value = 'http://125.43.106.217:44114/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e44d52f-4f68-eeca-61cd-00004a99f0be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/parm7","pattern":"[url:value = 'http://31.77.227.134/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eab8e89-2d5d-483c-7a2e-0000fe96aa2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/i","pattern":"[url:value = 'http://123.9.81.188:52368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e497e4ba-dacb-30e6-71f6-000068c60e83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/bin.sh","pattern":"[url:value = 'http://222.139.229.134:40628/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40560bfc-3aa8-cf79-aaba-00002954e250","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/i","pattern":"[url:value = 'http://182.245.28.97:40240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9cc9221-2370-cd0a-8b39-00001c5c0f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/bin.sh","pattern":"[url:value = 'http://123.9.81.188:52368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a164e215-bbb0-34f3-5363-0000c80c10bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/bin.sh","pattern":"[url:value = 'http://115.54.162.45:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e44a53-3548-f35d-712f-0000377d5430","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/i","pattern":"[url:value = 'http://125.41.109.138:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a4d3d9-a65a-2bad-5483-00000d80ba89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.40.34:41510/i","pattern":"[url:value = 'http://110.136.40.34:41510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e7d40c-3837-7c1e-1af6-00002656cb33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/i","pattern":"[url:value = 'http://115.49.73.173:58794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61541e15-851f-e037-43e0-000056dc8e66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/bin.sh","pattern":"[url:value = 'http://42.230.218.53:49708/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c00010a-b353-73f8-ddf9-0000e0faf145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/i","pattern":"[url:value = 'http://115.50.68.3:50876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cee274-0962-4c09-62d1-0000b71afb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.70:35378/i","pattern":"[url:value = 'http://120.84.214.70:35378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af003e1-733e-1f93-d896-0000cac65ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.86.128.27:34669/bin.sh","pattern":"[url:value = 'http://42.86.128.27:34669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ea38a9-31a3-6d17-8691-0000759f948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/i","pattern":"[url:value = 'http://123.5.153.225:57640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af9c557-3de1-f53a-b023-0000ef691432","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/i","pattern":"[url:value = 'http://182.121.246.143:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a07c22-9021-3722-8de4-00009ae3429b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/bin.sh","pattern":"[url:value = 'http://27.215.85.41:50026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d85d007b-a1d1-098d-0880-0000b908ef8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/i","pattern":"[url:value = 'http://222.141.120.242:36425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e77acea-81c2-8c7d-8ba2-00009cd0079c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.40.180.63:47173/i","pattern":"[url:value = 'http://39.40.180.63:47173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--089c9527-6539-ad16-0ebe-00003cfbb4f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680589ef-5419-2423-56db-0000cce305d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01012c8f-b36c-6aa8-7096-00005029422a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.31.114:44907/i","pattern":"[url:value = 'http://182.113.31.114:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1e5d23-21d2-968c-18d2-00003b67a3d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/bin.sh","pattern":"[url:value = 'http://42.54.8.116:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4237ef-975f-1e93-799e-00005e1d5245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.58.130.128:38469/i","pattern":"[url:value = 'http://113.58.130.128:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef5c6ce-c075-551f-4672-00003f3088a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.7.157.56:57185/i","pattern":"[url:value = 'http://27.7.157.56:57185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41537338-ef5c-4018-a6c0-0000287edbbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/bin.sh","pattern":"[url:value = 'http://222.142.252.154:39030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3675fb05-9865-e853-c769-0000259a3ab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/bin.sh","pattern":"[url:value = 'http://42.237.83.89:55341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54347593-ac40-85d4-30b0-000078df3a55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/i","pattern":"[url:value = 'http://115.54.162.45:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8227b141-7117-9b00-3b1b-0000ddfa8849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pppc","pattern":"[url:value = 'http://31.77.227.134/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85397897-e83e-e216-a980-0000b4c990a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/i","pattern":"[url:value = 'http://42.237.83.89:55341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3f4552-c24b-5506-65d9-0000a02629b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--237dfcad-a663-93e6-ef15-0000b36b288e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/i","pattern":"[url:value = 'http://60.18.84.125:39736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86da3ba-c8c1-0a37-0a29-00008a96cc7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/syss","pattern":"[url:value = 'http://61.184.10.103/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7755316-b403-a309-fd72-00005d2411bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/psh4","pattern":"[url:value = 'http://31.77.227.134/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--243614e8-dec1-fce6-75d7-0000b293865e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afb8855-c32c-66dd-8fc4-000047349028","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.153.54:53457/i","pattern":"[url:value = 'http://222.137.153.54:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b0eb23-0268-25bf-81d3-0000b896249c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/i","pattern":"[url:value = 'http://222.142.252.154:39030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d6415e-2baa-a288-73ad-000014864f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/i","pattern":"[url:value = 'http://115.49.28.151:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3d3571-3228-db3c-500e-00005b1cc9b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/amd","pattern":"[url:value = 'http://61.184.10.103/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a6513e4-d7d4-de43-9aff-000006aae9fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65397701-3b7f-483d-1401-0000cacf48c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/bin.sh","pattern":"[url:value = 'http://117.146.92.46:56049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3511194d-6076-4b1c-3d99-00007d84d2e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/bin.sh","pattern":"[url:value = 'http://222.141.120.242:36425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f3ff3c-0cec-7051-6a6d-00006e970706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/bin.sh","pattern":"[url:value = 'http://42.232.181.83:55625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53c3b1-2e69-067b-3a5a-0000225f55c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/bin.sh","pattern":"[url:value = 'http://210.208.110.130:49996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c5b898-b0f5-aae5-fac5-0000c064beac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/i","pattern":"[url:value = 'http://125.43.106.217:44114/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6215f19-b7a7-ae0c-ca17-000096cb8c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:43450/i","pattern":"[url:value = 'http://196.189.130.28:43450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61963dac-18a6-5a8c-a793-000057909f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/i","pattern":"[url:value = 'http://119.178.149.31:33483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d65a194-2bf0-e83c-0dc1-000084a84d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/i","pattern":"[url:value = 'http://61.137.198.130:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b3c650-3b8e-3113-dfcb-00005702f971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.238.108.90:47368/i","pattern":"[url:value = 'http://112.238.108.90:47368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5331247e-61a8-1ef7-030c-00000a2fe13b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8610fb45-87ac-125a-ed9e-000068d82211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pm68k","pattern":"[url:value = 'http://31.77.227.134/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e804b92d-ff58-411d-c732-0000f689411d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/i","pattern":"[url:value = 'http://42.87.111.88:33491/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ca5344-1bec-2b33-5bb8-000069c24529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/bin.sh","pattern":"[url:value = 'http://182.113.33.72:34879/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329bf80b-f195-8723-973e-0000439b8b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee095a-d50b-0880-6a57-0000032d9a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.134/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b095e86e-ac45-7abf-94c0-0000a0fdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/bin.sh","pattern":"[url:value = 'http://115.60.200.162:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a5f273d-1561-8ed4-52fd-0000f9d4cd67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/i","pattern":"[url:value = 'http://39.79.195.66:54804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68021fa4-da00-787a-0986-00000953dfc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/i","pattern":"[url:value = 'http://125.43.38.255:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47daf53-737a-c270-a0ce-00009da77814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/bin.sh","pattern":"[url:value = 'http://120.28.194.30:35812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597aeb1a-10a5-6362-94f6-0000e89dd154","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/i","pattern":"[url:value = 'http://115.55.59.69:53574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311d889c-420c-0eb5-b89d-000090237a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.29.39.213:56148/i","pattern":"[url:value = 'http://78.29.39.213:56148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7107359-5ff5-aaf6-0303-00008ebe6a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/bin.sh","pattern":"[url:value = 'http://115.50.68.3:50876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff8f7a9-3a99-346f-4de6-0000ca442e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/i","pattern":"[url:value = 'http://42.54.8.116:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e72c9b4-b70a-6ea1-b4be-000092126f2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/i","pattern":"[url:value = 'http://202.163.107.242:56229/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8103f53f-ab4e-3aaa-7ee9-00002b83a3c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/i","pattern":"[url:value = 'http://222.137.105.253:46499/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ad86a6-4434-5721-1231-0000ec3d84a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.71.0.131:9935/linux","pattern":"[url:value = 'http://120.71.0.131:9935/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2481e4f6-b11e-70d4-997d-0000e592cfb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/bin.sh","pattern":"[url:value = 'http://222.137.105.253:46499/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52596464-9005-e96a-f89c-0000a88e61f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30da26d2-fbf0-4e3c-0236-0000dfa31c2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.242.40:51278/i","pattern":"[url:value = 'http://182.126.242.40:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8441bfa2-e458-a70f-bfea-00004c0c0f55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.159.98.16/daemonc","pattern":"[url:value = 'http://94.159.98.16/daemonc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636f0ead-c519-f84f-c8b1-00006658dab9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.34.84:34056/i","pattern":"[url:value = 'http://60.17.34.84:34056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35fc90f-1916-46f3-0b5f-00001ec62232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.107.97:43395/bin.sh","pattern":"[url:value = 'http://61.53.107.97:43395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdd4c2f-a4bc-d0d4-8786-000063c9eaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/bin.sh","pattern":"[url:value = 'http://123.5.153.225:57640/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d09c6d4-fff7-249b-bc82-00009a8a1073","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/i","pattern":"[url:value = 'http://123.190.17.0:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4381cb14-388e-d612-30d0-00005de8f372","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/bin.sh","pattern":"[url:value = 'http://42.59.204.16:37885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddd3ee3-3b5d-5a52-f46e-0000e6759ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51ddb00a-0493-11d7-2598-0000e546c0f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d27d773-f06a-f563-84da-0000c9b27549","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/bin.sh","pattern":"[url:value = 'http://66.8.135.142:41648/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bf48bf-fa69-690f-6904-0000590a97c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/i","pattern":"[url:value = 'http://105.184.157.90:46817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec31238-51bd-f4eb-383c-0000a4971271","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/i","pattern":"[url:value = 'http://117.146.92.46:56049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb6cae8-b85c-048f-301d-00004090ed80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/bin.sh","pattern":"[url:value = 'http://221.15.253.184:44790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1f3eca-9144-5b5e-20a0-0000a483401f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/bin.sh","pattern":"[url:value = 'http://221.15.11.240:40642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024707cd-22f1-1b0d-9795-0000caf8024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/i","pattern":"[url:value = 'http://66.8.135.142:41648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8b1954-ba64-0252-6982-00007ea930e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/bin.sh","pattern":"[url:value = 'http://114.221.254.230:54765/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e89bf4-6378-e19b-370d-00007adfa751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/i","pattern":"[url:value = 'http://221.15.253.184:44790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37bed72c-26bc-3a60-c96f-00002781374e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.191:50908/i","pattern":"[url:value = 'http://115.48.144.191:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f321138e-494a-992c-7351-0000325b221b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/bin.sh","pattern":"[url:value = 'http://123.7.241.28:50935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92948ddd-e311-473a-85cb-000008685204","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.27.152:52881/i","pattern":"[url:value = 'http://105.184.27.152:52881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006ac580-e0ae-90ac-8110-00000ea9f563","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/bin.sh","pattern":"[url:value = 'http://182.240.9.116:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5960819f-c7cc-9e32-f9da-00006d137268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/bin.sh","pattern":"[url:value = 'http://115.55.10.180:53804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adef1928-7e73-239f-3fab-0000699d04aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/i","pattern":"[url:value = 'http://123.7.241.28:50935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504fd149-50c4-6189-32a5-0000f57d5bee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.173.11:52595/i","pattern":"[url:value = 'http://42.224.173.11:52595/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3191bf0-2b66-1e76-d0ab-00008cef55e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/bin.sh","pattern":"[url:value = 'http://115.59.34.198:49461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522e4b8a-65fe-7f1e-2b18-0000d78f40ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/i","pattern":"[url:value = 'http://114.221.254.230:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f576b9a-c51f-6cd3-5ae8-000077f40efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/bin.sh","pattern":"[url:value = 'http://115.56.174.13:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d132bf-67e9-de34-1ad1-000026d04ab5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/i","pattern":"[url:value = 'http://221.15.11.240:40642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637d56f1-62f1-0bf5-473f-00008225ab79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b66d39-b5f9-0d94-7a9a-00002d9d9815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a42f-a92b-bd32-abf2-0000b3072d8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/i","pattern":"[url:value = 'http://115.55.10.180:53804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceeb38-ec80-7922-a638-00001f58343a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.94:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb30c5df-44b4-4531-18b7-0000e2f724ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/bin.sh","pattern":"[url:value = 'http://175.148.157.224:54842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3221481e-979d-4e72-354c-000096071eb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/i","pattern":"[url:value = 'http://115.59.34.198:49461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c30d0f-0cf8-f36f-2c28-000048e9ef30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/i","pattern":"[url:value = 'http://115.56.174.13:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b8e631-0593-fac2-4729-00001c41a5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.143.200:56878/i","pattern":"[url:value = 'http://59.96.143.200:56878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1289704e-92ba-bcbc-448c-00003529a704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/bin.sh","pattern":"[url:value = 'http://125.42.27.234:57981/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad7fc21-e40e-2417-65da-00006d478025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/bin.sh","pattern":"[url:value = 'http://115.55.193.225:54553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb63466-46ff-129c-6a72-0000210417fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.143.40:35243/i","pattern":"[url:value = 'http://115.48.143.40:35243/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cd897a-6478-5907-f896-0000a2843597","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.203:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.203:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf6b408-4290-0068-b7a6-00002e12280f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/i","pattern":"[url:value = 'http://125.42.27.234:57981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4016593f-583c-c246-2f16-000044ecb40f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/i","pattern":"[url:value = 'http://175.148.157.224:54842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c35056-679d-52e5-34dd-00002491d9d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat","pattern":"[url:value = 'https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a896049-fb77-1692-85c5-00007aa4a398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dfc8e2-0753-f640-45bb-00004b5fd33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/i","pattern":"[url:value = 'http://115.55.193.225:54553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea46145-0dbc-7668-ee79-00002f7a376c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/bin.sh","pattern":"[url:value = 'http://116.55.72.18:38032/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f6ff70-f9eb-5270-3020-0000677d87d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.76.176:57084/i","pattern":"[url:value = 'http://222.139.76.176:57084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6122b0-a3b6-1d9a-790f-0000ac2fac0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/i","pattern":"[url:value = 'http://182.121.171.163:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0bb8e0-6cbe-f508-7443-0000e65a6819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/bin.sh","pattern":"[url:value = 'http://42.232.236.105:33973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8d896b-9af7-5ec7-6884-0000c9bcbded","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/i","pattern":"[url:value = 'http://116.55.72.18:38032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7fe02-de68-0203-9810-000043a32a7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/bin.sh","pattern":"[url:value = 'http://60.17.83.99:51270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3e8c252-87a6-38d0-4306-0000cc536055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/bin.sh","pattern":"[url:value = 'http://79.106.74.167:44091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8dcbe-58af-66aa-2446-00009e3346b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/bin.sh","pattern":"[url:value = 'http://219.155.12.214:51034/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724bd93e-0503-db37-545d-00006b776b08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.227/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66847f31-9533-a958-2e7d-000093ade86f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d979727-2baa-76a4-6c03-0000991f0f6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/bin/support.client.exe","pattern":"[url:value = 'http://178.16.52.133/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8f378c-a71f-248c-9864-0000f1599954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330fdd3e-4a85-c413-7667-00007eaa2bc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.ppc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca3059a-f4cf-328f-25e1-0000365a7e43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.i686","pattern":"[url:value = 'http://176.65.139.133/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe54d9b-3dee-ce13-a5f7-0000908735bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mpsl","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c644f166-b2c2-4ea1-06cb-0000c43aa78f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/debug","pattern":"[url:value = 'http://176.65.139.133/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d6d540-294b-c553-b548-000017138e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86_64","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ebdecf0-1e57-d05f-b320-000006a945b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a378b52-3105-3c86-9369-0000fb845bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mips","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3041f0c2-f981-acea-b70e-0000733a970b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm5","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4f91ee-5beb-2303-2f4b-0000d9335f80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm7","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdd76fb-2337-bf33-b003-0000cce0a99a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb655bfc-3974-1288-ff59-00002c3fdea9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b842f81-c275-ffde-7221-0000ec484b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz.sh","pattern":"[url:value = 'http://176.65.139.133/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465d3f69-5917-5955-7804-0000fe74b232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.sh4","pattern":"[url:value = 'http://176.65.139.133/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31496367-6721-7206-a198-0000f83e596a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.spc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--461bbf84-1706-5d53-5a13-0000fb728d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.m68k","pattern":"[url:value = 'http://176.65.139.133/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a948a178-ed89-c2fd-99b0-0000618f38e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm6","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930715e3-1f49-ff55-bc30-0000f6035873","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a35456-9792-4d09-4d8c-00000d4f7db7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.64/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ea9738-5534-d131-f098-0000a0d1e634","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/i","pattern":"[url:value = 'http://60.17.83.99:51270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6e4dd8-c6cd-aa80-3727-000098315cda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.172/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ed5670-9245-3da4-a6c4-000092dd4970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a55d54-2b70-922b-1425-0000366ab7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8f910c-6210-6f32-2913-0000e831998c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d30629da-04a2-b228-9f4e-0000d94dcf45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.23/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.23/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--609c563b-aaea-db09-2395-0000c9106a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de06326-4686-024f-7e3f-0000266ca58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8133118018/7hc0ffr.exe","pattern":"[url:value = 'http://62.60.226.140/files/8133118018/7hc0ffr.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99c922b-df84-a6c0-b8bc-00007aa0db81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca1780c4-6e72-5bbb-fbfc-0000da806674","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/bin/support.client.exe","pattern":"[url:value = 'https://84.200.80.106/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee6d224-b20b-8fb1-c087-000031554bdc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/bin/support.client.exe","pattern":"[url:value = 'https://79.133.57.37/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a94d1c-14e5-d16d-591d-00000b9735ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38aa0258-f0cd-4cf3-c277-000092ec12ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R6.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c77807-d3e0-a09b-2199-000013dff79e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9bf3-2267-f7d2-6a01-0000e02f5556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ca2be8-a219-dfe6-086d-00005e461274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31243ead-7437-356f-c213-000058107400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9c3940-ed2f-baa8-b85a-000073d19a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.65.215:34323/i","pattern":"[url:value = 'http://42.54.65.215:34323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb6c649-1a22-7025-acdf-0000349f95bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.29.33.253:58457/i","pattern":"[url:value = 'http://27.29.33.253:58457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07b9b21-81d2-c5bd-8f9e-0000989b92ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b020a23b-0b14-48de-4131-00007b17b1cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0a0a13-c4cb-5e7a-de20-0000f02c598f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f92835-d674-c61d-3e0a-00004fea86e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd845a7f-3c40-e322-2260-0000015a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fddcb8-4a4c-1341-6c2c-0000d1baeefd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6537684c-885e-2104-541f-0000986f75cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a883181-77e4-9257-1952-000031bf38b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/bin/support.client.exe","pattern":"[url:value = 'https://192.142.53.225/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703d0d59-1622-136f-d65f-00007add62bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea5f9d7-7e54-7d24-be54-00001f726b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/i","pattern":"[url:value = 'http://219.155.12.214:51034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b38426f-e417-f6b6-dc88-00005db05cb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.58.56.49/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://2.58.56.49/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5eb7139-4086-9e9f-824f-0000de30e843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/bin.sh","pattern":"[url:value = 'http://125.43.38.255:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a769c912-025e-15ab-5c3e-0000c58287ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/bin.sh","pattern":"[url:value = 'http://42.224.121.161:40429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68bd94a-d6f0-a4ee-b47f-0000a3eb69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:55397/i","pattern":"[url:value = 'http://156.146.26.225:55397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb8a37a-e669-7d2c-c383-0000ed807ce0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/i","pattern":"[url:value = 'http://42.224.121.161:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39cc9317-01e1-22b6-77b4-000025a1a720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/bin.sh","pattern":"[url:value = 'http://222.141.22.9:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a51b53a-285d-7b9f-9acb-000058541eed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/i","pattern":"[url:value = 'http://60.217.123.198:46902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94b0902-6fa6-7fc5-f37f-0000c73eb268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://scuttlepopdownload.monster","pattern":"[url:value = 'http://scuttlepopdownload.monster']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4397433f-57fc-8013-2794-00006e7efd61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://daleeby.com/R4JnneaiZebrwCkgG","pattern":"[url:value = 'https://daleeby.com/R4JnneaiZebrwCkgG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14527404-4515-30da-d7c9-00003d49614c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.101/Servicer.apk","pattern":"[url:value = 'http://77.239.124.101/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b125c32-c26e-5254-b840-0000362e170b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat","pattern":"[url:value = 'https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4a3153-c821-b845-21fa-0000cad87a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mpsl","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382b4f69-74ef-73e2-eaae-0000682d1fb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be0ed26-813d-7586-188a-0000836c10ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm7","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f1d27a-db36-fa27-1069-0000d4a4cdc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/ven9392.exe","pattern":"[url:value = 'https://62.60.226.185/ven9392.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c24b3b87-b9dd-366a-661d-0000cdb03f49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/s0907.exe","pattern":"[url:value = 'https://62.60.226.185/s0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62a564e-4330-d081-d381-0000b928d6c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/t0907.exe","pattern":"[url:value = 'https://62.60.226.185/t0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ee8c0a-1be0-aa52-e701-00002965d825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm5","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce7ddb0-eb0f-8dbb-849e-00003bd077cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm6","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e70b47-c591-d6f2-185e-00005c39704f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd2af5e-89ea-ecf4-70ed-0000d3165561","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b4c34c-78be-58d8-44d9-0000a12dc201","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.m68k","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513fbc4b-b7df-9324-5eda-000076afeb57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5a9cba-44e8-7eb6-fec1-00006af543e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99553a89-4d08-a531-2b17-0000243a1e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec07d8de-ca25-b647-56e1-0000a4e487cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.sh4","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f98f79a-76b8-e77d-f16f-0000a1db14db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43269882-0305-de5d-1a47-00007d520fec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.s390x","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e186d99-b9e6-68a9-209b-0000c58b4b23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat","pattern":"[url:value = 'https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a047b2ec-22b9-9bea-863e-00006ac574c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://wer-ldr.duckdns.org/b.sh","pattern":"[url:value = 'http://wer-ldr.duckdns.org/b.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9846e0be-5d2e-a31d-e50d-0000fa778165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86_64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1384d0-ea84-3fef-f9fd-0000a2ae6c94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.spc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a454d4a-7f90-ecac-17ab-0000ca1ac9b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/bin.sh","pattern":"[url:value = 'http://115.49.7.198:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538d9b3c-3a48-c684-06ba-0000d8bbf545","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://verifyidentify.com/check","pattern":"[url:value = 'https://verifyidentify.com/check']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66995323-06e6-3e08-03a2-0000d6389806","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://akb.cat/N330","pattern":"[url:value = 'http://akb.cat/N330']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3e11af-aea2-c967-0f7a-0000b4ea6142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/bin.sh","pattern":"[url:value = 'http://210.208.110.42:56390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--877789d3-fdb4-22ae-01b4-00005f9909dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.68.231:52921/i","pattern":"[url:value = 'http://123.11.68.231:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a56d3aa-42b2-182d-e09a-00000884ff0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/i","pattern":"[url:value = 'http://210.208.110.42:56390/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8a76a1-abb8-fe5d-ffab-000058c4c65b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/bin.sh","pattern":"[url:value = 'http://182.127.115.109:39219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39889fc2-5004-55e0-32db-000073e79a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.justturtle.com/indie.exe","pattern":"[url:value = 'http://www.justturtle.com/indie.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864802da-166d-154c-0df7-00003e595eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/i","pattern":"[url:value = 'http://182.127.115.109:39219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7a1fee-0535-9321-9069-00002a802ef5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/bin.sh","pattern":"[url:value = 'http://119.185.241.8:42488/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51ab281-1681-6d20-b410-00003f10018c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/i","pattern":"[url:value = 'http://58.255.41.239:39378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e18902-2519-d044-cf66-0000cabe605e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977f368b-c710-b225-5a3b-000050b04c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1e267d-8163-4107-5d60-0000918e0080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b173f144-719d-b197-3f6f-0000474e9079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/bin.sh","pattern":"[url:value = 'http://125.40.68.15:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10793c01-1680-e2ad-f2e9-0000af9e9fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab6b2b9d-d07e-7670-c093-0000adad2b1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51f6cc55-062f-aabd-d22f-0000ad9066cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c4b243-39a7-3645-021e-0000cc50bcd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.148.3/70/img_222651.png","pattern":"[url:value = 'http://23.94.148.3/70/img_222651.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b5097-79b8-9e21-f716-00004a283e95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pic.li/images/MSI_PRO_Last.jpeg","pattern":"[url:value = 'https://pic.li/images/MSI_PRO_Last.jpeg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f160ce46-567f-5bfc-439a-000098aa2fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/upd","pattern":"[url:value = 'http://103.229.53.84:8443/upd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcd8c9f-f259-fe8b-cea7-000070dad3b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/update.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0428d26e-55b8-594e-48ab-00003084ace7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/dll","pattern":"[url:value = 'http://103.229.53.84:8443/dll']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c376189-fbf5-6050-fe03-0000dec99a04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/r.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/r.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3547e754-37b6-5b78-b7b3-0000664472ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/run.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/run.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a763c74a-45d0-aaea-8079-0000d97b3c74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/enc","pattern":"[url:value = 'http://103.229.53.84:8443/enc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afda0505-9082-002f-c9d0-0000e9cc4865","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/package.zip","pattern":"[url:value = 'http://103.229.53.84:8443/package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d71592d6-ce0b-ed00-f635-000053d80088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/chromelevator_x64.exe","pattern":"[url:value = 'http://103.229.53.84:8443/chromelevator_x64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87ad1c4-9b08-ec89-c966-00004a231786","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/data","pattern":"[url:value = 'http://103.229.53.84:8443/data']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93dc3bb5-1088-b5ac-12ed-000084340801","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/bin","pattern":"[url:value = 'http://103.229.53.84:8443/bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e427c3a-873a-e625-3598-0000c6d233a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/i","pattern":"[url:value = 'http://125.40.68.15:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b7b338-2002-901e-b38e-000044e32a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/config.bin","pattern":"[url:value = 'http://196.251.107.186/zs/config.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152da76b-45a3-59c1-30f0-0000146d1721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/uniform_4.44_INSTALL.exe","pattern":"[url:value = 'http://196.251.107.186/uniform_4.44_INSTALL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc6614f2-3794-c130-ecc7-0000c849f1f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clpr6.exe","pattern":"[url:value = 'http://196.251.107.186/clpr6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be063531-460e-ffea-99d5-00009a8dad34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e519e23-33d7-acda-c4d6-00003dd37b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta","pattern":"[url:value = 'https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e122262f-c879-4535-ddc3-0000d1d98652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://one-graup.com/LUI.hta","pattern":"[url:value = 'https://one-graup.com/LUI.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1698b0a3-dc71-e3d6-764a-00003559134f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4227670f-79fd-fe21-6aea-0000709c4ada","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/i","pattern":"[url:value = 'http://119.185.241.8:42488/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409532a8-0cf0-019c-b3b9-00004e087a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/bin.sh","pattern":"[url:value = 'http://58.255.41.239:39378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7d41e5-624c-477d-670a-00009c8924ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/bin.sh","pattern":"[url:value = 'http://42.231.190.213:48304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabedb4a-4f96-9cd3-f8f6-0000c76ecf1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.182.97.242:3654/i","pattern":"[url:value = 'http://163.182.97.242:3654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c804b24-b10e-a4de-9127-00003507be00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/i","pattern":"[url:value = 'http://42.231.190.213:48304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c1f283f-c69e-1868-e486-00000b144460","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.26.85:51916/i","pattern":"[url:value = 'http://42.5.26.85:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1c19c4-f250-b829-fab6-0000edd18e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/bin.sh","pattern":"[url:value = 'http://182.123.210.94:55730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1ae60-a8e3-8d2d-65dc-00007df1fd0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/bin.sh","pattern":"[url:value = 'http://27.37.229.46:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce792ca-1b13-dca0-3f1d-00001557c977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.218.95:36712/i","pattern":"[url:value = 'http://42.231.218.95:36712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e746faf4-c5e7-5b45-c6e4-0000375773d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/i","pattern":"[url:value = 'http://27.37.229.46:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c185077d-8b29-bdf6-cff7-00007acc5f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/i","pattern":"[url:value = 'http://182.123.210.94:55730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb31b5-e9c4-c1f1-5ec0-0000c66645d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://154.90.70.52/xmrig.sh","pattern":"[url:value = 'http://154.90.70.52/xmrig.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117caa21-42b6-9d98-77e6-0000c0a2001c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/bin.sh","pattern":"[url:value = 'http://122.241.88.111:37163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dff80cf-ea34-cd6a-9d90-00007804e368","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/i","pattern":"[url:value = 'http://222.138.103.241:51367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4b4a2-663e-4a44-7976-00007f98c067","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/i","pattern":"[url:value = 'http://122.241.88.111:37163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb3b9f8-226f-5288-3bed-000028ce905a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://firstratezim.com/Updater.exe","pattern":"[url:value = 'https://firstratezim.com/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ef9d0e-4eb5-9c59-eeb6-00000ab26362","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/bin.sh","pattern":"[url:value = 'http://222.140.197.114:37580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94321eb4-1065-5238-c9d3-00002ab77da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325592.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c403346-917f-8269-b834-000002d69050","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/bin.sh","pattern":"[url:value = 'http://42.224.81.6:39508/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe2bfad8-cc15-725c-e463-00003503d1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/i","pattern":"[url:value = 'http://222.140.197.114:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65df087-fb79-5b6f-e366-0000116a8499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mipsel","pattern":"[url:value = 'http://31.58.171.194/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d60e3b-952c-9706-5bb5-00002d7b1522","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mips","pattern":"[url:value = 'http://31.58.171.194/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889cdbb2-cc88-c83b-c2b7-0000a9d9ace3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/bin.sh","pattern":"[url:value = 'http://42.238.169.48:54614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--056549fc-937a-0c40-b80a-000054cbae84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/bin.sh","pattern":"[url:value = 'http://103.249.199.3:45299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92acc6-19d0-f65b-5c2f-00007de7aeeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/i","pattern":"[url:value = 'http://42.224.81.6:39508/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586f5e2c-0d38-5b4b-6a3e-00003c14f661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/i","pattern":"[url:value = 'http://42.238.169.48:54614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac95b69d-352d-b67c-5077-000033470054","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/bin.sh","pattern":"[url:value = 'http://123.12.46.19:42170/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7e7c76f-1cd9-0078-fc34-00000d28ff56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/bin.sh","pattern":"[url:value = 'http://101.108.7.49:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f05425a-757b-ec79-dd6a-0000277837bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.59.126:36050/bin.sh","pattern":"[url:value = 'http://119.114.59.126:36050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691c192b-61a7-220c-5f42-00004f6f1991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/i","pattern":"[url:value = 'http://123.12.46.19:42170/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086743b1-a53e-54a0-ce7b-0000386839bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/bin.sh","pattern":"[url:value = 'http://42.230.45.47:55198/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034aab2-2368-2b73-1b32-000047f0cf16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/i","pattern":"[url:value = 'http://101.108.7.49:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b032b6-0cd2-be94-fbbd-000013b42037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.233.205.151:33594/bin.sh","pattern":"[url:value = 'http://121.233.205.151:33594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e3ae0b8-f3e9-6c49-1a80-0000a749c066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/i","pattern":"[url:value = 'http://42.230.45.47:55198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2307ea-7199-c501-ec50-0000bd25f7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.35:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1ddea7-8b66-bb93-c038-000054fc8a59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.233.205.151:33594/i","pattern":"[url:value = 'http://121.233.205.151:33594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a075ab-c8e2-ba90-17f9-0000a5c5d9dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm5","pattern":"[url:value = 'http://31.58.171.194/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3beae0-7932-2ccb-14ed-0000480e67a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86_64","pattern":"[url:value = 'http://31.58.171.194/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1839b2-14a2-808a-c935-00002f447a11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86","pattern":"[url:value = 'http://31.58.171.194/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feebd9f-7f9d-54ff-d7ae-000014e0a596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/bbc","pattern":"[url:value = 'http://31.58.171.194/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ae1487-1c75-e06f-40b1-00000fcc1157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm7","pattern":"[url:value = 'http://31.58.171.194/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa7453d-5de0-2ffd-386f-00001d79beb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm4","pattern":"[url:value = 'http://31.58.171.194/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a92411-2779-c324-e46a-0000b7707632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm6","pattern":"[url:value = 'http://31.58.171.194/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbfb6f4-3ea1-a373-24a3-0000affa391c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_powerpc","pattern":"[url:value = 'http://31.58.171.194/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90a9a20-ccfc-b61c-c82e-0000a7408809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_aarch64","pattern":"[url:value = 'http://31.58.171.194/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd2612-3833-6d00-4b62-00009dda7e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/bin.sh","pattern":"[url:value = 'http://123.172.77.129:45661/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12bc1103-cbab-2534-9627-0000673e2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/i","pattern":"[url:value = 'http://115.48.163.35:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee34d402-6066-3c62-0175-000033126580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/bin.sh","pattern":"[url:value = 'http://219.157.249.227:40515/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef636be-794f-6ef0-9992-0000e67450e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/bin.sh","pattern":"[url:value = 'http://103.31.103.204:55940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21036bef-63d9-7b4a-1175-000049c831c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/bin.sh","pattern":"[url:value = 'http://42.224.151.118:35018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d589c57c-be14-fc0e-6660-00008b74ccc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/bin.sh","pattern":"[url:value = 'http://115.57.121.48:46211/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd0bc67-8282-0288-74f8-0000774dabb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/i","pattern":"[url:value = 'http://103.249.199.3:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36dc9145-a399-3c7b-38b5-000065182f17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/i","pattern":"[url:value = 'http://103.31.103.204:55940/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049768bc-20b9-6a8b-4413-0000fb7da596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/i","pattern":"[url:value = 'http://42.224.151.118:35018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06951339-a149-ad82-3d38-00003e46bdee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/i","pattern":"[url:value = 'http://115.57.121.48:46211/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701f26dc-df94-f832-234d-00003e33075b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:33484/i","pattern":"[url:value = 'http://83.219.1.198:33484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cfe93d-167f-f1c7-acc0-00005ca2a428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/bin.sh","pattern":"[url:value = 'http://182.116.11.55:53485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19008a68-4732-a443-7919-000073deafee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.186.126.198:55528/i","pattern":"[url:value = 'http://60.186.126.198:55528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d7d846-8d73-8c75-7b38-0000d137bce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/gg11","pattern":"[url:value = 'http://191.44.114.243:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cddd5f9-3265-a0d4-0d1c-00004a4e925e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/bin.sh","pattern":"[url:value = 'http://222.141.132.237:60298/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fff88a9-621b-037e-9325-0000fc87de00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/i","pattern":"[url:value = 'http://182.116.11.55:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04126e7a-eb08-fc83-081e-0000a5d79f4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.145.210:44835/i","pattern":"[url:value = 'http://27.44.145.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fdc2c0-fce6-6bbd-f8aa-00005f19e8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.10.6:39981/i","pattern":"[url:value = 'http://115.48.10.6:39981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e13fd2-375e-6951-9fd0-0000f5a85ca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/.bash_history","pattern":"[url:value = 'http://191.44.114.243:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33ffbc1-083f-1749-0c9a-00002535ac31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.165:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fd55a-4eb1-879f-301c-0000df74f295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/bin.sh","pattern":"[url:value = 'http://180.190.189.204:53404/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7ced69-bbc8-97ec-2c35-00000113054c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://connectmagazineads.com/CarbonCopyCloner7.dmg","pattern":"[url:value = 'https://connectmagazineads.com/CarbonCopyCloner7.dmg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8c5b39-a1dc-987d-a820-0000628dd0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe","pattern":"[url:value = 'https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3432781-df4a-4c55-836d-000021919695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/8089/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/8089/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87576957-e47d-e5ee-6aa0-0000dcb569a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/sike/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/sike/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83716315-188c-be48-d284-000087495d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/35/eas/niceworking.vbe","pattern":"[url:value = 'https://217.154.188.255/35/eas/niceworking.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3361ce49-6f4f-84f5-1a4a-0000e4f158dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe","pattern":"[url:value = 'https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001f91d0-35f7-9b75-4b0f-00009cadc630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta","pattern":"[url:value = 'https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0fa07b-7614-53c0-9fc0-0000926a63f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/p/cgnty_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/p/cgnty_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f1e226-7054-b142-57cb-00006e442cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/bin.sh","pattern":"[url:value = 'http://116.2.53.55:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a610df9-060f-a982-51ce-0000c1782228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/r843.exe","pattern":"[url:value = 'https://62.60.226.185/r843.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f596f1d4-4317-ddb8-6f52-00006a3d3e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta","pattern":"[url:value = 'https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd9daea-472a-1fbd-0c62-0000d4db5730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/kaze.exe","pattern":"[url:value = 'https://62.60.226.185/kaze.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6643fac-e7d2-b2b1-5e78-000036156e61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta","pattern":"[url:value = 'https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188bfa63-4819-4b9c-59dc-00002ade6350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk","pattern":"[url:value = 'https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab3b005-8983-586b-9c06-00004410cbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'https://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598f8632-2b06-d0db-fce8-0000c347d575","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.95.62/ph/velogs.exe","pattern":"[url:value = 'https://172.245.95.62/ph/velogs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86039b7-fb3d-40d0-0705-000077514161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'https://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce5daa2-b5b3-5c4e-427a-0000853df77e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js","pattern":"[url:value = 'https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223f0d52-fca2-57d1-efca-00009886ec22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/63748/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/63748/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86deecee-86e6-a8dc-0dc0-0000c4aafbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/29039/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/29039/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c960dd-ea5e-ca5c-088c-0000f662f2b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/09890/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/09890/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2870e0eb-c27a-02f9-778b-00005fbaf817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js","pattern":"[url:value = 'https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6303bf-4a20-b86b-a598-0000c5e29f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/bin.sh","pattern":"[url:value = 'http://112.198.239.2:34176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3728c6-0ba2-49d8-92f9-000084b4a437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/v/client_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/v/client_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278be35-d319-6241-a23b-0000f24e187f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.195.219/ty/load.bat","pattern":"[url:value = 'https://217.60.195.219/ty/load.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--240c523a-c1eb-53a5-c850-00005cb15631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.195.219/ty/s.bat","pattern":"[url:value = 'http://217.60.195.219/ty/s.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156c377e-37f5-5fab-68b8-00007e1a8da6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/spxploy.vbs","pattern":"[url:value = 'https://baoxissde.one/S/spxploy.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caff75d9-bd8d-42bd-7677-0000096429e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0e8e21-0437-e766-5e2c-00008f41f144","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tantralegacy.com/Client/battlebot.exe","pattern":"[url:value = 'https://tantralegacy.com/Client/battlebot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea065319-9575-58b6-4787-00009f747619","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/go_b3.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/go_b3.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99238564-9a6a-b69e-be3e-00005f3b3bb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://itsmystik.com/dl/deadlock/Loader.exe","pattern":"[url:value = 'https://itsmystik.com/dl/deadlock/Loader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2604653a-3445-2522-4311-0000c26d7e35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi","pattern":"[url:value = 'https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278e7c4-75c2-a91c-0e4a-00002d31e785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://94.26.90.90/client.exe","pattern":"[url:value = 'https://94.26.90.90/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f8d30ef-306a-0295-e4b0-00001a871b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi","pattern":"[url:value = 'https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24937ac2-a8a0-bc89-4977-0000da8b5426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/sp.zip","pattern":"[url:value = 'https://baoxissde.one/S/sp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7fc2456-e6b2-b234-1c91-0000d9a448ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://xxpro.dev/BAC_PC%E5%A3%B3.exe","pattern":"[url:value = 'https://xxpro.dev/BAC_PC%E5%A3%B3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ab77df-a4b2-e639-29ca-000053d9a2b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe","pattern":"[url:value = 'https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755a6932-ce92-b170-c21e-0000ec181c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d226d631-6e1d-fe8a-a913-0000d4b02dbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9895d4-afc2-e24e-38ad-00008c14bd87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac501e0a-a07b-03d3-3586-000046cbaeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.97.56.196/Services.apk","pattern":"[url:value = 'http://38.97.56.196/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db7accd-edda-a43a-1490-00003ab6952a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/Services.apk","pattern":"[url:value = 'http://176.65.139.139/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2bcc8a-385f-4e86-2acb-0000d327ba24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c540b52d-8f91-59a0-7603-00002b8d8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.221.93.40/Servicer.apk","pattern":"[url:value = 'http://37.221.93.40/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab17141-55f5-8504-ef62-00000f6c691e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a93d6-7e06-76b1-1571-0000b1177d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.196:8080/api/v1/install","pattern":"[url:value = 'http://94.154.43.196:8080/api/v1/install']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d3aa77-ade5-cbc5-e012-0000eefaec6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm4","pattern":"[url:value = 'http://69.33.213.199/nerv.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a2e171-a571-a2db-5703-0000def847f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mips","pattern":"[url:value = 'http://69.33.213.199/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11875f2-5fa9-5575-76ba-00000312f724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_64","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd49ae1-f45d-049b-cd3f-000056468b0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm5","pattern":"[url:value = 'http://69.33.213.199/nerv.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e5fc7c9-392f-a797-d8c6-00001567e503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86","pattern":"[url:value = 'http://69.33.213.199/nerv.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75b4961-070a-6b1d-bab8-00006061984e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.dbg","pattern":"[url:value = 'http://69.33.213.199/nerv.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81dafbcd-06dc-f3f2-f624-0000fc4f4380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm7","pattern":"[url:value = 'http://69.33.213.199/nerv.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df16362e-d69e-bf50-b2bc-0000bb6d0abf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://ip-69-33-213-199.dfw.megapath.net/nerv.mips","pattern":"[url:value = 'http://ip-69-33-213-199.dfw.megapath.net/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bf1450-d5e4-6da9-ff93-0000edba1280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sh4","pattern":"[url:value = 'http://69.33.213.199/nerv.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07027b8-fcb1-34d4-4c71-0000b5fb29bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mpsl","pattern":"[url:value = 'http://69.33.213.199/nerv.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450c2482-ea4f-a4a1-97f0-0000ee992788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_32","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ddcb5b-b31e-11ca-cd24-000044f324e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm6","pattern":"[url:value = 'http://69.33.213.199/nerv.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3edf607-fb15-ffbd-a770-00006d648b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.ppc","pattern":"[url:value = 'http://69.33.213.199/nerv.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7d0f5d4-52aa-eb4a-c500-000091ee1fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sparc","pattern":"[url:value = 'http://69.33.213.199/nerv.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198ed5a7-df5d-80b5-75a2-0000de0e912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.m68k","pattern":"[url:value = 'http://69.33.213.199/nerv.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4cff81-6089-d2d9-ca4f-0000f8cfc4ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/bin.sh","pattern":"[url:value = 'http://219.156.98.218:49065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63af33-d58d-33ac-1637-00002f7f8eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.90.106:37277/i","pattern":"[url:value = 'http://182.126.90.106:37277/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb517ae-86c0-e50d-766a-00009918f6be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/launch.vbs","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/launch.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2f61db-12e7-8a23-0cf5-0000a29df8db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/inject.ps1","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/inject.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8d0fe6-ae78-a111-3518-00004d880a74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/as.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/as.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d2acf0-931f-45af-cb9e-00002bdd76e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/wupd.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/wupd.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6d9864-c6bf-df78-1885-000031333b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/ac.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/ac.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0467d5fd-e8d8-4181-9214-000066f36088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/i","pattern":"[url:value = 'http://219.156.98.218:49065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2bdbb8-f390-4e85-f76e-0000f14b0fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/i","pattern":"[url:value = 'http://182.121.250.165:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abeccef-9d3e-a709-719c-00001d5ed490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/bin.sh","pattern":"[url:value = 'http://115.48.12.174:50575/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee7dca5-6ccf-f436-1876-0000382627f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/i","pattern":"[url:value = 'http://180.190.189.204:53404/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d22c68-e723-398f-8f21-0000e35e0734","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/bin.sh","pattern":"[url:value = 'http://27.215.52.217:41359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a134766e-f5f9-fe3f-a2d8-0000eeee89e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/i","pattern":"[url:value = 'http://115.48.12.174:50575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5879db-5991-5e41-a7c8-0000eee784cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mips","pattern":"[url:value = 'http://94.154.43.210/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--039e9dac-7d68-18bc-3ec3-0000f74cabbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv6l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b3ce6f-cd47-1945-6f22-0000b0ecd16d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv5l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a85aced-2364-330d-c71f-0000ca2c820d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv7l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b24a21d-b63d-d6bb-32f0-000040ba4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.x86_64","pattern":"[url:value = 'http://94.154.43.210/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a8ff2e-6f61-4d37-7100-00008d8cf8dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv4l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc5d1dd-c8b9-3256-b2af-0000020a2111","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/344f7e","pattern":"[url:value = 'http://5.182.210.174/344f7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d82af97-5dfe-cd13-7b75-00002603a9ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c515ee","pattern":"[url:value = 'http://5.182.210.174/c515ee']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2469196a-495e-6e67-8d33-00001e587b98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/573976","pattern":"[url:value = 'http://5.182.210.174/573976']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c88fff19-b3a9-3c6e-851a-000009a2be5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4844d","pattern":"[url:value = 'http://5.182.210.174/c4844d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23a6240-68d4-de98-e338-0000152b183b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/094392","pattern":"[url:value = 'http://5.182.210.174/094392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96aeb304-aa3a-f32d-3509-00000df99e70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3679a","pattern":"[url:value = 'http://5.182.210.174/b3679a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fbabb7-d59b-25ff-93f5-000053fbe30d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9dfbc4","pattern":"[url:value = 'http://5.182.210.174/9dfbc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c6088-f145-d0e7-0a9f-00006aac384d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/49fa35","pattern":"[url:value = 'http://5.182.210.174/49fa35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd42245b-213f-6a41-aef7-0000fda54558","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/065109","pattern":"[url:value = 'http://5.182.210.174/065109']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d4b0278-d4d0-65ff-e281-00007dac86f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/473c1a","pattern":"[url:value = 'http://5.182.210.174/473c1a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db423d4-04d6-90cd-bcc2-00000c53d8cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acb326","pattern":"[url:value = 'http://5.182.210.174/acb326']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6c0b3d6-564a-f372-84f0-000029fe3301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69d5f2","pattern":"[url:value = 'http://5.182.210.174/69d5f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50df3ad8-05c4-dd94-abc9-00004429304a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/279fe0","pattern":"[url:value = 'http://5.182.210.174/279fe0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae6dde-8ef2-6463-6f45-0000925cc61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/456417","pattern":"[url:value = 'http://5.182.210.174/456417']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--154e5548-4fcb-73b8-c407-0000dc575c45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b08fb","pattern":"[url:value = 'http://5.182.210.174/2b08fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77f2049-bf77-6e7f-add6-0000de03bb09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0db2ec","pattern":"[url:value = 'http://5.182.210.174/0db2ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b07e229-3974-06c1-ac86-000031c63c77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/db7a9c","pattern":"[url:value = 'http://5.182.210.174/db7a9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804f7f65-ff78-a982-a412-0000f4ae75dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ac363","pattern":"[url:value = 'http://5.182.210.174/8ac363']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8192a18a-3098-53dc-c77d-0000b1c9a4b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/515c80","pattern":"[url:value = 'http://5.182.210.174/515c80']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c73821a-e83f-1aea-719f-0000257eb90b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0b1663","pattern":"[url:value = 'http://5.182.210.174/0b1663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60c8e5-a1d8-8533-0e85-000015ce6b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c72382","pattern":"[url:value = 'http://5.182.210.174/c72382']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de7f014-3d3f-947c-6c2c-0000c58bd809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/676064","pattern":"[url:value = 'http://5.182.210.174/676064']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c00d38c-3884-2b47-9ae8-0000b64c31ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/78f157","pattern":"[url:value = 'http://5.182.210.174/78f157']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02b4ba52-77b0-89d2-dc95-000049688ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/faedd6","pattern":"[url:value = 'http://5.182.210.174/faedd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5642b87a-9b1a-215a-ca34-000019deac72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mipsel","pattern":"[url:value = 'http://94.154.43.210/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d7aaea5-8333-53f5-b4f2-0000ab91d33d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/55bd33","pattern":"[url:value = 'http://5.182.210.174/55bd33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6ce237-74ce-e8b2-99ac-0000fd1e0a2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/804c43","pattern":"[url:value = 'http://5.182.210.174/804c43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5686c6f7-dedf-eab5-f329-0000dd867670","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1498b2","pattern":"[url:value = 'http://5.182.210.174/1498b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec58b2b1-0822-1d09-edcc-000083a9c499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4d493d","pattern":"[url:value = 'http://5.182.210.174/4d493d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e3f803-5a37-9a8b-8294-0000135623c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/589a29","pattern":"[url:value = 'http://5.182.210.174/589a29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6219c764-1635-cc66-9259-00005b78cf79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b74d4d","pattern":"[url:value = 'http://5.182.210.174/b74d4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e887f83a-09c8-1902-d762-000072335836","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de19ef","pattern":"[url:value = 'http://5.182.210.174/de19ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65ac785-3023-7efc-20dd-00001c8d6560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a20da","pattern":"[url:value = 'http://5.182.210.174/6a20da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125ebaf7-e26f-a60a-2df0-0000d6041a28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e00ee7","pattern":"[url:value = 'http://5.182.210.174/e00ee7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cc4337-ea7d-2a03-f7e7-00009cd424c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b39f8f","pattern":"[url:value = 'http://5.182.210.174/b39f8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c498c84e-622b-b886-f416-00007385a390","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85692b","pattern":"[url:value = 'http://5.182.210.174/85692b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52bb3d-6761-e59b-b121-00005a91744d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/76e6f5","pattern":"[url:value = 'http://5.182.210.174/76e6f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda7fb7f-0028-d198-754a-000014216423","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/i","pattern":"[url:value = 'http://27.215.52.217:41359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0461516-f676-b1c6-2a8f-000044d7982d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.182.131:41041/Mozi.m","pattern":"[url:value = 'http://115.57.182.131:41041/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b2a05-f5f2-a44f-ac06-0000316ab2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.63.8.194:46154/Mozi.m","pattern":"[url:value = 'http://183.63.8.194:46154/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6430928a-5a6e-1823-fc28-00007d7a03a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.229.108:47843/Mozi.m","pattern":"[url:value = 'http://110.186.229.108:47843/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f92c51b-4455-56b4-7207-00004c89d8d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/atomic/atomic.sh","pattern":"[url:value = 'http://77.239.124.108/atomic/atomic.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fc993e-df92-b575-d604-0000ce0b0291","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/bin.sh","pattern":"[url:value = 'http://183.23.132.41:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6616849-3700-2a8f-fab5-00001cac4336","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/i","pattern":"[url:value = 'http://61.53.220.201:34645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5f6a82-14fa-c0da-7796-000072014553","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://python3.en-us--balancing.co/jquery.min.js","pattern":"[url:value = 'https://python3.en-us--balancing.co/jquery.min.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0033c6-7dcd-1bab-758a-0000953fca10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multisavcx.xyz/ncx","pattern":"[url:value = 'https://multisavcx.xyz/ncx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdbd96f-fdce-a501-e8de-0000f606bc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://elxxvvx.xyz/i","pattern":"[url:value = 'https://elxxvvx.xyz/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24a4109-6183-6b3a-60b2-000084cca859","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a237d7-dbe5-f0b5-38ab-0000d46f04d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63a825f-09d2-2d8c-1832-00005c2f0fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/bin.sh","pattern":"[url:value = 'http://119.117.76.11:59095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a7c925a-226e-72b6-3f31-00008f993b6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/i","pattern":"[url:value = 'http://183.23.132.41:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12970091-b939-bd54-d791-000066cc919c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/i","pattern":"[url:value = 'http://113.229.190.135:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c55215b-be5d-bcc1-63ce-00000301343b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.210:44835/i","pattern":"[url:value = 'http://120.84.212.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0892007e-bdb6-338d-9eed-0000b418f294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/i","pattern":"[url:value = 'http://119.117.76.11:59095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3fec70-7c51-d3ec-9095-0000e42abc8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.77.1.20:6021/linux","pattern":"[url:value = 'http://120.77.1.20:6021/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--829e0ca6-f177-c003-dea7-0000928195b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.203.4.64/client.exe","pattern":"[url:value = 'http://85.203.4.64/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03baadc-8c4b-eacd-5886-00009506345d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b","pattern":"[url:value = 'http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd81d191-feea-5db6-6999-00000a3bd03c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.213:53264/bin.sh","pattern":"[url:value = 'http://115.55.236.213:53264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2059e8-1638-1d52-8fc1-0000039002ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.95.17:59123/i","pattern":"[url:value = 'http://61.53.95.17:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac9f115-c9ff-7602-f9df-000001848e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/bin.sh","pattern":"[url:value = 'http://60.184.140.145:34890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc06874-6b53-6922-50ea-000091cea6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.253.208:46690/bin.sh","pattern":"[url:value = 'http://59.97.253.208:46690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--139b82da-99e5-1c4c-b583-00001a00455e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9b3ce1-0001-7dd4-4880-00004878cc46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/bin.sh","pattern":"[url:value = 'http://112.232.226.68:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e25fc2-a628-cfd7-f75a-0000157ac5a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/RUMPYU14TH.png","pattern":"[url:value = 'http://193.104.58.65/RUMPYU14TH.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c733ad0f-881e-9ed8-61d7-00005b53a1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/rumpyu13th.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu13th.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7ab72d-781f-b4f4-377a-0000dfb730ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/img_gas.png","pattern":"[url:value = 'http://193.104.58.65/img_gas.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc689350-1f95-0c0f-2ec1-000081cf5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/rumpyu18.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu18.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddaf2a8-b3d4-1725-581c-00006391f18e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.95.103.215/crypt/crypted.ps1","pattern":"[url:value = 'http://23.95.103.215/crypt/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19c1b87-2558-80e9-4095-000040835cef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bda0899-7aff-a4c1-df19-0000a86b7758","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg","pattern":"[url:value = 'https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538c1da3-27db-0c11-65b0-0000342a05d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/bin.sh","pattern":"[url:value = 'http://58.47.104.43:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a07c4ee-c8f0-6176-1220-000066f83f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.61.0:41221/bin.sh","pattern":"[url:value = 'http://219.155.61.0:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b9833c-0d63-1e69-d9f3-00007b14997d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sivrex.click/obi/Obi-64Bit-remcos_a.bin","pattern":"[url:value = 'https://sivrex.click/obi/Obi-64Bit-remcos_a.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbe862b-8779-bc3a-1439-0000816e4da2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2af571d-7f6f-7940-676f-0000531b00b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2813545b-fca1-2657-5e60-0000cef65d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png","pattern":"[url:value = 'https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b3a7a8-b1ee-fd29-7588-0000903381c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sixmexicos.com/20/stego_cm94aawwlf.png","pattern":"[url:value = 'https://sixmexicos.com/20/stego_cm94aawwlf.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa4e3a6-9406-6d27-e011-00008d6ba338","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nieuw.technoberg.nl//wp-content/bin44.exe","pattern":"[url:value = 'https://nieuw.technoberg.nl//wp-content/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b4889-586e-2975-b1ef-0000de8b28b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/niceorgimg_082205.png","pattern":"[url:value = 'https://sunix-technology.com/images/niceorgimg_082205.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076dc90f-25ff-c766-858d-0000d6117376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/bin.sh","pattern":"[url:value = 'http://123.9.240.151:46316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47c02a-5635-c1c2-7375-0000e2ee854e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/i","pattern":"[url:value = 'http://58.47.104.43:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--accd4ba2-1a4b-ec42-6f53-0000d8d2e4cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html","pattern":"[url:value = 'https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b544a7a7-62f7-92be-9331-0000b8b6a159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso","pattern":"[url:value = 'https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--105a0019-8376-d536-d149-00006c3f65ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.246:33661/i","pattern":"[url:value = 'http://182.121.153.246:33661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470040ac-6d67-7720-bc84-0000d46daee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/i","pattern":"[url:value = 'http://123.9.240.151:46316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce44296-a206-01eb-f25d-000068c08ac6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/i","pattern":"[url:value = 'http://182.119.6.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0a1843-d4c4-77d5-1008-0000e464073e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/bin.sh","pattern":"[url:value = 'http://42.228.233.155:37974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c61b686-5aed-0d58-a10e-000099e47ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/i","pattern":"[url:value = 'http://42.228.233.155:37974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be660a3f-9dae-5815-1158-0000857fcb5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://files.catbox.moe/knujwn.png","pattern":"[url:value = 'https://files.catbox.moe/knujwn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01f6457-46b9-c8ee-d302-0000111cde7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/bin.sh","pattern":"[url:value = 'http://61.52.159.178:51500/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27eebf33-ab67-abb4-0f2f-0000f6b46348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb0b3fa-57b4-51fe-6e60-000048acfda0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cea42e5-ff66-d15d-5077-0000d9cf7148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.231.174:57989/i","pattern":"[url:value = 'http://79.106.231.174:57989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3069985f-996d-7555-272d-00001e60f5fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/bin.sh","pattern":"[url:value = 'http://182.119.6.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad7c800-8323-fb1a-cd5e-0000efe25fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/bin.sh","pattern":"[url:value = 'http://120.84.215.27:44835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca557bcb-0843-6582-b958-0000be463983","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.137.246.220:9705/linux","pattern":"[url:value = 'http://85.137.246.220:9705/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da66f71c-54e7-1a5c-7fae-00001e66ac77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.40.213.105:9384/linux","pattern":"[url:value = 'http://121.40.213.105:9384/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d97196-0d6f-a98a-fed6-0000c4c3a348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.108.130:33716/i","pattern":"[url:value = 'http://119.117.108.130:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d07c51-e1b5-65f2-e9b2-00009c51e52f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.229.127.206:53013/i","pattern":"[url:value = 'http://211.229.127.206:53013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86b299d-bcf7-5200-90ab-00009f9b49de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/i","pattern":"[url:value = 'http://61.52.159.178:51500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a567aeb3-08cb-ee24-2211-0000d03c60de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.5.87.54:4370/i","pattern":"[url:value = 'http://36.5.87.54:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3483c000-1b80-a1f0-f61e-00004b3d404e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/bin.sh","pattern":"[url:value = 'http://222.138.103.241:51367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278f8543-9160-59a9-4392-0000bd5984af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/bin.sh","pattern":"[url:value = 'http://182.117.51.201:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0accfd3-8bc8-dd0a-f4e4-0000e8bbea65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.49.31:47819/i","pattern":"[url:value = 'http://182.114.49.31:47819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993203fe-bce7-5acc-2179-0000a8d619ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.247.247:43842/i","pattern":"[url:value = 'http://182.121.247.247:43842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68984925-3912-40be-a595-0000159f2ef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/i","pattern":"[url:value = 'http://182.117.51.201:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dbf78f-94b2-3619-01b3-000054e365b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/bin.sh","pattern":"[url:value = 'http://42.178.23.194:35659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d12bad-c14d-a4bf-2702-0000a2729471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/i","pattern":"[url:value = 'http://61.137.206.166:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9dd9c08-a4bb-dd4f-c1fd-0000dff37fb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/i","pattern":"[url:value = 'http://42.178.23.194:35659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b02ff-a05a-2551-baa6-0000bf0fbbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/bin.sh","pattern":"[url:value = 'http://60.217.123.198:46902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84686b51-2db9-b038-94da-00005c685aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/i","pattern":"[url:value = 'http://85.108.86.149:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1498cf99-92cf-4d70-8659-0000b4021632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/bin.sh","pattern":"[url:value = 'http://123.14.178.128:40955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928878f5-2bdb-8d1a-1e78-000043fc0ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/i","pattern":"[url:value = 'http://123.14.178.128:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e98ed1f-0681-34fb-1393-0000f608372a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/bin.sh","pattern":"[url:value = 'http://61.53.84.173:60970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d97589-5610-72fb-cb4d-0000b7d582c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.41.147:38217/i","pattern":"[url:value = 'http://125.43.41.147:38217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc85ef4-2ac2-47a0-91cf-0000f73ca457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.0:38525/i","pattern":"[url:value = 'http://163.142.93.0:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0997e9a2-0df5-4d99-a528-0000cf5d82eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/i","pattern":"[url:value = 'http://61.53.84.173:60970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073aa809-ac46-a890-0e24-00005b759175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.132.198.200/payload_v10.sh","pattern":"[url:value = 'http://178.132.198.200/payload_v10.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1eabfa-7612-b031-a00e-0000fbd9eb77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/MSI_PRO.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbcf7aea-511d-15b1-4d60-00008e085e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/tu3929.exe","pattern":"[url:value = 'https://62.60.226.185/tu3929.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87c7569f-5a3b-9806-093f-0000ebd81725","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8","pattern":"[url:value = 'https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e0b851-3ba4-3874-e27a-0000151ec715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0993a88f-2879-a01c-7f4a-000011c7ed05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc1.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118e4066-07cd-2a97-d28d-00004255130f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e1e8d0-bbdd-3582-518b-00003855db43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a1598f-30bf-04d9-893e-0000d4b76c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/","pattern":"[url:value = 'https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1e5d72-e3be-0cc5-206b-00005619e7d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/","pattern":"[url:value = 'https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a8d519-8796-658a-1012-0000c3c3c7c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://107.174.251.112/img/3.jpg","pattern":"[url:value = 'http://107.174.251.112/img/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117c1a04-722c-ed43-6bb8-00001ae12aaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vibecoders.vip/softwaretech","pattern":"[url:value = 'http://vibecoders.vip/softwaretech']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5c1b51-7290-44ef-0da9-000052e3d706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1","pattern":"[url:value = 'https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd56784-3cf8-8603-a6dc-0000ce4f2d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/stego_2pu3tp48pp.png","pattern":"[url:value = 'https://somostask.co/stego_2pu3tp48pp.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d779a-823f-8387-3d3a-0000578f8a9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/bin.sh","pattern":"[url:value = 'http://61.53.220.201:34645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fe319c-bfb7-12ed-4e1b-00009c27dc84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/bin.sh","pattern":"[url:value = 'http://119.183.51.162:34711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e2561e-334c-7e91-533f-0000402bb275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/bin.sh","pattern":"[url:value = 'http://27.220.84.239:55052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c392672-b321-3eba-9f5d-00003fd8f290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=","pattern":"[url:value = 'https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8dcaef-53ad-ec92-1b43-0000f4d412b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/bin.sh","pattern":"[url:value = 'http://42.5.10.102:53641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8f79b9-d977-998b-4647-0000bd03dc63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.zenledgerpolicy.com","pattern":"[url:value = 'https://www.zenledgerpolicy.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--912be624-bc04-29db-c670-00006faa0629","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582eca8c-15c0-9329-93bb-0000f19a9519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://docuslutmentadoonline.top/reference/","pattern":"[url:value = 'https://docuslutmentadoonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e367df-da43-3ef5-68d8-0000611c79e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://robinhoodwallet.dervano.vu/windows/","pattern":"[url:value = 'https://robinhoodwallet.dervano.vu/windows/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f62236a-6a9c-174d-174e-0000ac237c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://swanrecovery.com","pattern":"[url:value = 'https://swanrecovery.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca89969f-bcf6-f401-1333-0000b146acb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://helnivo.vu/FinalCD","pattern":"[url:value = 'https://helnivo.vu/FinalCD']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c92c4e3-4c47-8074-4400-0000ee45cbf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://docuuumennnntonline.top/reference/","pattern":"[url:value = 'http://docuuumennnntonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495edd5-6991-3480-ad04-0000148158ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azlvaka.vu/access","pattern":"[url:value = 'https://azlvaka.vu/access']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44e5bb27-451c-4d9f-951c-00001e25740b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f0557-b626-84a7-c710-00001b26c5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/i","pattern":"[url:value = 'http://27.220.84.239:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6684ddb7-9940-c246-e75c-0000ea245136","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ad61ec","pattern":"[url:value = 'http://5.182.210.174/ad61ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999e2779-8d77-db1e-73aa-000062241ace","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4a84f","pattern":"[url:value = 'http://5.182.210.174/c4a84f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee00321-3495-8559-e8fe-000046ded88c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eafe3","pattern":"[url:value = 'http://5.182.210.174/3eafe3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f479af-9f34-810b-939f-0000627fab31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fc2db6","pattern":"[url:value = 'http://5.182.210.174/fc2db6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4485a36-be36-db5d-2ced-0000ecc3a014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9685","pattern":"[url:value = 'http://5.182.210.174/9c9685']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ba805-81d7-f4aa-b181-000038df487d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a40ae","pattern":"[url:value = 'http://5.182.210.174/6a40ae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91139d9c-56e9-8c1a-305b-0000402eb122","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3eb09","pattern":"[url:value = 'http://5.182.210.174/b3eb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c06043-b130-dbd0-4523-00007833df10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/026141","pattern":"[url:value = 'http://5.182.210.174/026141']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfa5ab1-17bd-5b6c-2563-00002dd67ff8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/939936","pattern":"[url:value = 'http://5.182.210.174/939936']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e278cd-a1a3-a095-c843-0000c4e330b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f287aa","pattern":"[url:value = 'http://5.182.210.174/f287aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031fa63d-c997-598a-5fc5-0000ad9025f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b97872","pattern":"[url:value = 'http://5.182.210.174/b97872']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9326b6-76be-f612-fa72-00009f7d86cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a3160","pattern":"[url:value = 'http://5.182.210.174/9a3160']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c35337-05d8-1536-fd9b-000046a92b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh","pattern":"[url:value = 'https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab661674-7ca2-35ea-1479-00001fc7f433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/bin.sh","pattern":"[url:value = 'http://182.126.248.10:58244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e96bc9-d448-8996-5ad9-000035d700b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/bin.sh","pattern":"[url:value = 'http://85.108.86.149:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e75554-fda3-9b3a-ee86-000066611d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1420190-f4fa-8645-27f2-000088acec62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/bins/parm64","pattern":"[url:value = 'http://31.77.227.121/bins/parm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e48ce00-c5f7-bccc-18e1-0000d9087642","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/i","pattern":"[url:value = 'http://42.5.10.102:53641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19510ad-c9c5-cac4-f105-0000ef71fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.141:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.141:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72080ddc-cea8-da79-5ed9-0000cb907ff7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.44.60:34879/i","pattern":"[url:value = 'http://182.113.44.60:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006402b5-6d8e-f8a8-1ae2-00004f0abe96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/i","pattern":"[url:value = 'http://182.126.248.10:58244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcf0717-49aa-cbbf-2c4e-0000a985b972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.147.247:47891/i","pattern":"[url:value = 'http://115.56.147.247:47891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f082bf-a246-c226-c04d-00008e7cf4c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.150.195.235/newpath.sh","pattern":"[url:value = 'http://45.150.195.235/newpath.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9104d0b-db19-9e0c-d13d-0000a0438b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/bin.sh","pattern":"[url:value = 'http://175.168.114.203:46828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42731c28-5c9e-e5df-557d-0000ed532f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/i","pattern":"[url:value = 'http://175.168.114.203:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcd4b9c-f5d6-9462-e136-0000f6272c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://flooriscoveringworld.com/bin.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09a891f-07a4-48d6-c1a8-00001997f87b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/i","pattern":"[url:value = 'http://115.62.135.216:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c16-4f09-10c3-828d-0000e4f4a37d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://wylkpznq.xyz/hukl/cp/bin.exe","pattern":"[url:value = 'https://wylkpznq.xyz/hukl/cp/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e33e1b-eb99-7e11-ef00-00009cc3a133","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/Candy.png","pattern":"[url:value = 'https://somostask.co/Candy.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c942cbd-af1e-969b-7c61-0000f7a31452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png","pattern":"[url:value = 'https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87daa203-972b-6f16-5a1a-00000c071ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png","pattern":"[url:value = 'https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83bcfa5e-6f9d-2eaa-4eac-0000bed0b007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/646d52","pattern":"[url:value = 'http://5.182.210.174/646d52']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c9e5160-92cf-9a38-7e0c-000008b65ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e27047","pattern":"[url:value = 'http://5.182.210.174/e27047']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0003f4-eb25-67bb-7005-00006d96cd5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6a806","pattern":"[url:value = 'http://5.182.210.174/e6a806']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a354c1a0-405a-d6ff-034d-000093e96b8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/908e60","pattern":"[url:value = 'http://5.182.210.174/908e60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f2188-f0b1-a860-53fb-00003c1e272b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/833d99","pattern":"[url:value = 'http://5.182.210.174/833d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d14cb64-d705-6981-f4dc-0000897cfc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f61d73","pattern":"[url:value = 'http://5.182.210.174/f61d73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f253aca-6d26-c1c8-b34e-000006e35c29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6711b4","pattern":"[url:value = 'http://5.182.210.174/6711b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad264fa5-e82c-50f3-5609-00008e290cbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/229db9","pattern":"[url:value = 'http://5.182.210.174/229db9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a94d0a6-98ad-8bb5-435d-00005fd9f614","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/59e4b9","pattern":"[url:value = 'http://5.182.210.174/59e4b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5a0c31-cfb9-788d-19ae-0000f6d43d35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1e596c","pattern":"[url:value = 'http://5.182.210.174/1e596c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19012bb1-2006-7e64-a602-0000319d1c6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/63d2dd","pattern":"[url:value = 'http://5.182.210.174/63d2dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae44a27d-b36a-2c3e-7a1c-000045dfe5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a9eeb4","pattern":"[url:value = 'http://5.182.210.174/a9eeb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a7e37a-7477-8a14-0632-000090f13e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/i","pattern":"[url:value = 'http://115.58.177.63:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048fc7b4-d681-1ad1-70ca-0000cf9dcc5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c97dc31a-9243-a149-4e3b-00002ba4eacd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ad42ea-ea6b-4622-9227-00003a2be24c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee8f5a94-8a78-d216-58c7-0000333f7e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/pr2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/pr2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c6b1d0-7abf-323d-2ea7-0000f62688a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/prcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/prcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c969e9-e95d-bf4a-c1a9-000004c204ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/img_122332.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/img_122332.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9cc55c-ea7c-de98-a044-0000dee46ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/bin.sh","pattern":"[url:value = 'http://182.112.89.53:48165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ee0b5f-8798-8547-7989-000037d03a94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/i","pattern":"[url:value = 'http://182.130.209.58:35031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe626ff-9ffa-e78b-712b-0000c059b585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/bin.sh","pattern":"[url:value = 'http://222.137.105.216:51325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138feb62-13a8-324d-f5df-00007fa8ee65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/i","pattern":"[url:value = 'http://182.112.89.53:48165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ba1677-6bb0-7da0-cda3-000092e4d40c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a862e32-7421-ccb8-fb5d-0000dc455b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/eecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/eecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--544176f6-4c62-6baf-3d84-00003d81e5ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kits.frog.tw/Images/stego_jxdqj7fw9j.png","pattern":"[url:value = 'https://kits.frog.tw/Images/stego_jxdqj7fw9j.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79234fc4-bccc-ac79-f16f-0000b75659f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/clc.zip","pattern":"[url:value = 'https://gaiadeqi.com/clc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15368973-4b15-5659-2400-0000873a2529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/i","pattern":"[url:value = 'http://222.137.105.216:51325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4588abe6-f56b-668a-5b51-0000f78987c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/bin.sh","pattern":"[url:value = 'http://116.2.50.30:54263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9dd3435-00f9-ae64-e116-0000959e3fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/bin.sh","pattern":"[url:value = 'http://115.50.254.53:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73265546-114a-7f2e-b715-000095a09843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/i","pattern":"[url:value = 'http://42.225.241.153:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678947cd-439a-b9d6-b638-0000465da29c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/i","pattern":"[url:value = 'http://116.2.50.30:54263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71daca9-bc30-6e32-1e05-0000436bbc9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/i","pattern":"[url:value = 'http://115.50.254.53:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81e6727-0315-d3cf-9fbd-000019c7d570","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/bin.sh","pattern":"[url:value = 'http://42.7.217.91:35797/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a286c2-188e-c036-c520-0000335cfa9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/bin.sh","pattern":"[url:value = 'http://162.255.251.91:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0929ed-604f-b8bc-97d9-000068d621cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/bin.sh","pattern":"[url:value = 'http://115.62.135.216:60668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca05231-8281-7683-24fa-00008f84565b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.81:51284/i","pattern":"[url:value = 'http://163.142.93.81:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640ab228-adb1-e36c-8d28-0000f40e77b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/bin.sh","pattern":"[url:value = 'http://14.107.121.45:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85247879-d164-c61a-fd2f-000074b301db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/bin.sh","pattern":"[url:value = 'http://42.225.241.153:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddf0a8d-bd4d-286a-6c4a-0000f118ea9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/i","pattern":"[url:value = 'http://162.255.251.91:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b99a412-886f-e8f5-009a-0000a86c6036","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/i","pattern":"[url:value = 'http://14.107.121.45:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6fe0d0-cb52-9367-835f-0000fa8cffb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/i","pattern":"[url:value = 'http://113.236.118.216:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688a4f9a-429d-1ba1-1239-00007e7e4114","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.56.136.70:46446/i","pattern":"[url:value = 'http://42.56.136.70:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f08b43-f4f6-b87e-19cf-0000e360c58f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.4.93:56227/i","pattern":"[url:value = 'http://115.51.4.93:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c42c53-9a39-177a-5953-00003fb4b8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:57585/i","pattern":"[url:value = 'http://41.201.226.25:57585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228b9cac-47c3-13e5-1fa4-0000838a7e36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.216.59:45025/i","pattern":"[url:value = 'http://27.207.216.59:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2720583-9d60-3c0c-24f5-0000d47904f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.113:60057/bin.sh","pattern":"[url:value = 'http://59.96.139.113:60057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fca4e-893e-64ca-87a4-000044b3968d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/i","pattern":"[url:value = 'http://112.248.174.58:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d92283-5bec-9d8b-adb3-00004fb8cc2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/bin.sh","pattern":"[url:value = 'http://42.230.209.22:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ca3871-cb3c-204a-de38-0000cd6bd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/i","pattern":"[url:value = 'http://42.230.209.22:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d686da-0e0f-db8d-247e-00007601bd66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/bin.sh","pattern":"[url:value = 'http://115.57.212.220:54561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b6a766-66ec-5cc5-7060-00007b68ce8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://140.237.7.157:41787/i","pattern":"[url:value = 'http://140.237.7.157:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f7cb20-b052-e7ef-a3b0-0000c7ec6a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/i","pattern":"[url:value = 'http://115.57.212.220:54561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd3e08f-931a-3b6c-2781-00005fbb69fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.13.196:55125/bin.sh","pattern":"[url:value = 'http://182.120.13.196:55125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f19e4-da45-2075-903d-00005122893b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.235:41753/i","pattern":"[url:value = 'http://46.236.65.235:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b0e494-6481-e6fe-8c73-0000ff1fd016","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/bin.sh","pattern":"[url:value = 'http://123.9.195.116:34313/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fa32c0-7fb0-f2c4-0f58-0000d5c19cd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb1a9b0-edb6-67b2-919b-0000f28b3fa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/bin.sh","pattern":"[url:value = 'http://61.54.253.22:60163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74abb301-8e52-49b8-7c4d-00007b58a8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/bin.sh","pattern":"[url:value = 'http://182.121.43.33:42422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceb20f8-519f-b36f-e7f1-0000edfd7898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.177.12:56227/i","pattern":"[url:value = 'http://123.12.177.12:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9014ab2-a9a1-324e-fd76-00004f3df870","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/bin.sh","pattern":"[url:value = 'http://123.190.17.0:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f867940-d056-1d28-3d72-00007eca2cdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/i","pattern":"[url:value = 'http://123.9.195.116:34313/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5ff39f0-e6e8-4ad2-d18e-0000623454fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/i","pattern":"[url:value = 'http://182.121.43.33:42422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fae832c-1fc8-3f48-38f6-0000e4e1bf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/i","pattern":"[url:value = 'http://61.54.253.22:60163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e951b9c-d09d-4c13-5a7b-0000292ca825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/bin.sh","pattern":"[url:value = 'http://182.123.162.14:46510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e3e9aa-a64d-81d0-979a-000096266647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.118.232:57819/bin.sh","pattern":"[url:value = 'http://115.61.118.232:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66ebaa8-5c38-eb66-88ad-0000973d43ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/bin.sh","pattern":"[url:value = 'http://115.55.52.24:36106/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336155c8-1951-200f-c44e-000096b37aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/bin.sh","pattern":"[url:value = 'http://123.9.223.160:52129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf511864-5bd1-1d44-ccb7-000025dfdfa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/i","pattern":"[url:value = 'http://182.123.162.14:46510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a164071-0d1a-2bef-3d79-0000a5e8bda7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/bin.sh","pattern":"[url:value = 'http://61.53.120.157:38424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8882e6a7-a4e1-610e-b784-000023d3b8a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/i","pattern":"[url:value = 'http://115.55.52.24:36106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d63c89f-fcb8-355e-72c3-0000d5a1d74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/bin.sh","pattern":"[url:value = 'http://119.114.63.205:38557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b156d33-b685-8a9d-38aa-00006fd5effd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/bin.sh","pattern":"[url:value = 'http://223.151.74.149:48587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c00f8e-3c22-03e7-8079-00000321ad5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/bin.sh","pattern":"[url:value = 'http://42.231.203.243:47565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8266700f-888b-8978-7df5-000074c4bf8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/i","pattern":"[url:value = 'http://61.53.120.157:38424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e57ead-5865-8bcb-949d-0000440ac925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/bin.sh","pattern":"[url:value = 'http://112.248.174.58:54368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08b3a85-bf78-fbbf-c1ce-00004c4b18b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/i","pattern":"[url:value = 'http://123.9.223.160:52129/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14de4f6-753b-0cd2-4952-0000774041b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/i","pattern":"[url:value = 'http://119.114.63.205:38557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f70b09-3f4c-8b40-aa1b-00003b8ac097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/i","pattern":"[url:value = 'http://42.231.203.243:47565/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f1bf748-e051-0522-85d8-00005b67271f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/i","pattern":"[url:value = 'http://125.46.213.70:33401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427ab81-4319-4f4f-b3a2-0000fc78e424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.102.151:51009/i","pattern":"[url:value = 'http://175.174.102.151:51009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ace10a8-73d9-789b-c8e9-00001503b48a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.197.57:46174/i","pattern":"[url:value = 'http://175.165.197.57:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--896a7bf2-05e5-b42d-f4b9-0000239acae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/bin.sh","pattern":"[url:value = 'http://42.224.103.64:50547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3951249f-0b4d-7a96-47ee-0000efbd3a9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/i","pattern":"[url:value = 'http://42.224.103.64:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba3b094-c0db-c18b-158b-0000a57609d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/bin.sh","pattern":"[url:value = 'http://42.5.254.164:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f619a74-a6b6-072f-7479-00001695b663","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.27:46218/i","pattern":"[url:value = 'http://125.44.18.27:46218/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f166d4-f34a-4f2a-c213-000087ebd641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm7","pattern":"[url:value = 'http://124.163.212.119:800/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d3f1bc-b7e1-6650-34a8-00002a4f11d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm","pattern":"[url:value = 'http://124.163.212.119:800/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e6bdcbb-d038-7379-927d-0000ca9066e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arc","pattern":"[url:value = 'http://124.163.212.119:800/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff65642-7340-0f32-7b77-00003f57b124","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm6","pattern":"[url:value = 'http://124.163.212.119:800/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c897c68-6b50-2ac4-e794-0000a55cd234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mips","pattern":"[url:value = 'http://124.163.212.119:800/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1df2a0-0a32-d0d3-433c-00006882f782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i686","pattern":"[url:value = 'http://124.163.212.119:800/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95bbaa1-d74e-1a4f-745d-0000ce5fbc7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mpsl","pattern":"[url:value = 'http://124.163.212.119:800/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b9777e-ed7b-dc71-3325-000078dae4bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/ppc","pattern":"[url:value = 'http://124.163.212.119:800/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ffc927-ac6a-6ea9-4855-0000fe4e9612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/spc","pattern":"[url:value = 'http://124.163.212.119:800/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ff07f8-b3a0-79cf-2cd1-00002de21eca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm5","pattern":"[url:value = 'http://124.163.212.119:800/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a61a38-3bee-7f76-a210-000051960d44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86_64","pattern":"[url:value = 'http://124.163.212.119:800/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a548be-5987-a4ea-35a6-0000a5aa04ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/m68k","pattern":"[url:value = 'http://124.163.212.119:800/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a99926ce-d4a8-0bbf-9cfc-0000254a5689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i486","pattern":"[url:value = 'http://124.163.212.119:800/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0b46b0-4260-02c4-22e2-000000d98ac9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86","pattern":"[url:value = 'http://124.163.212.119:800/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ffbb50-6612-a6b9-2ace-0000b2f9f303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/bin.sh","pattern":"[url:value = 'http://115.62.154.212:42250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acabaf44-f4f5-9572-6ba8-0000eb7eba58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/bin.sh","pattern":"[url:value = 'http://175.107.210.253:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f673d1ab-7099-e310-6290-000070742301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.161.106:41462/bin.sh","pattern":"[url:value = 'http://27.217.161.106:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99115be5-6163-ceb4-99d4-000068a0f311","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/bin.sh","pattern":"[url:value = 'http://93.113.166.57:59924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53a294-a8be-0f4c-15aa-0000603f8b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/i","pattern":"[url:value = 'http://115.62.154.212:42250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f7778a1-12d5-47d0-1e21-0000054b65f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/bin.sh","pattern":"[url:value = 'http://115.56.100.50:44024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24682dc4-67c8-558b-1d07-00000193c893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/i","pattern":"[url:value = 'http://115.56.100.50:44024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--add5cca7-9b6d-d2a4-bd3e-0000b9b7b0ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/bin.sh","pattern":"[url:value = 'http://125.40.3.106:49988/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d70ea09-3e9b-5d21-2962-00000f331476","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/lilin.sh","pattern":"[url:value = 'http://124.163.212.119:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95942b6e-5fa1-b459-81d0-0000372d0925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/i","pattern":"[url:value = 'http://123.8.162.45:59164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2c9d5e-5d71-898d-fe2f-00006463de3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/i","pattern":"[url:value = 'http://93.113.166.57:59924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2bd328-c15e-b6ee-1b3d-0000c4813d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/bin.sh","pattern":"[url:value = 'http://182.127.84.138:35880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36a3a7d-cd36-e309-e79f-00002091e851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/i","pattern":"[url:value = 'http://125.40.3.106:49988/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b18caa8-3c0f-6436-ecaa-00000164eeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.97.100.192:59504/i","pattern":"[url:value = 'http://210.97.100.192:59504/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c51c6aaa-eb9b-9a2b-1ea9-0000ab8a42bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/i","pattern":"[url:value = 'http://182.127.84.138:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db19f5-b1fa-bd1c-004e-0000cd785606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.108.130:33716/bin.sh","pattern":"[url:value = 'http://119.117.108.130:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4105f5de-1853-3a04-74d5-00006ac0bca2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/i","pattern":"[url:value = 'http://60.162.38.51:34372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63d6675-e63a-ed1f-2e0b-0000cd836f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/i","pattern":"[url:value = 'http://182.116.20.246:39870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b9d10b-e315-f914-6485-0000d2bd557e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.201.235:59633/i","pattern":"[url:value = 'http://42.225.201.235:59633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda9eeab-b93c-8e91-d4ee-00004eac32bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.25.157.124:39654/bin.sh","pattern":"[url:value = 'http://78.25.157.124:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4c071d2-99d3-578c-7d26-0000d73b2e53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/bin.sh","pattern":"[url:value = 'http://105.186.163.117:50795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--617653f6-03b3-2a63-7940-00006dcf9033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/i","pattern":"[url:value = 'http://105.186.163.117:50795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb19e7d-ddd1-a68b-6bf5-0000fbfb9aee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/i","pattern":"[url:value = 'http://124.234.219.153:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e95ff55b-79a2-bf5c-671a-00000680dd8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/bin.sh","pattern":"[url:value = 'http://27.215.123.78:39336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b446d77a-714e-ff58-9241-0000fcd61fe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/bin.sh","pattern":"[url:value = 'http://175.151.74.60:46830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734d5ee-2869-5f79-439a-00008af17dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/i","pattern":"[url:value = 'http://27.215.123.78:39336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc5fcad-dcee-adcd-0998-000076d1135f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d085433-cbba-505e-10f8-000002570e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/i","pattern":"[url:value = 'http://175.151.74.60:46830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931b17a-9abc-2d36-1b61-0000011037f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/weds/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/weds/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00bf21cf-dead-17ba-7149-0000b9c42f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/image/stego_3d5qe0layt.png","pattern":"[url:value = 'https://coconutoficial.com.br/image/stego_3d5qe0layt.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d215717-ddb9-7af1-3c70-0000548c2bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/AdobePDF.bat","pattern":"[url:value = 'https://brightwatch.mypi.co/AdobePDF.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c125752e-e692-ddc4-39c5-0000dfe97771","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/Adobeinstaller.msi","pattern":"[url:value = 'https://brightwatch.mypi.co/Adobeinstaller.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34c325c-b6a3-4663-6116-000003cacb03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/i","pattern":"[url:value = 'http://42.177.182.116:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ea7aae-04ea-7514-4a81-0000b29faf48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/bin.sh","pattern":"[url:value = 'http://39.78.182.86:43103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fa4351-d42e-80bb-87a8-00001f3406f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://159.255.31.48:59678/bin.sh","pattern":"[url:value = 'http://159.255.31.48:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f2fb03-a740-8d05-6ad3-000052cb5098","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.219.218:37565/bin.sh","pattern":"[url:value = 'http://120.28.219.218:37565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e72aac5-87be-a8ef-0b05-000089f155e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/bin.sh","pattern":"[url:value = 'http://175.44.156.36:37033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c40838-0e1f-8c5a-0cd1-00008ade7d57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e4aed8-a3f2-e880-9831-0000e00f9600","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://github.com/Orukemer/image/releases/download/Image/3.jpg","pattern":"[url:value = 'https://github.com/Orukemer/image/releases/download/Image/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e136c090-de60-9c05-a4a2-00000d25bf68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ca56c8-5f40-0959-0587-0000fc9a53cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.225.135.160/downloads/3.jpg","pattern":"[url:value = 'http://45.225.135.160/downloads/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2835b36-d76e-7019-b83d-0000f96e8a5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39d453e-0fe1-c31b-325a-0000d933d93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed0403a-af39-c0f7-055b-0000ab20b8d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc6b925-8a9b-50ee-29c8-00008df0b3aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835e4546-f344-873a-9a91-000081bc73ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.109.75.161:8080/lin1948WEx","pattern":"[url:value = 'http://86.109.75.161:8080/lin1948WEx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04fac299-d223-8add-b9c0-0000a210681b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.98.99:33747/Mozi.a","pattern":"[url:value = 'http://112.123.98.99:33747/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df068758-a2a1-9112-62f2-00000b7891c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/bin.sh","pattern":"[url:value = 'http://210.208.111.36:53831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c14faa1-1df0-94be-cb01-0000d845afaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/i","pattern":"[url:value = 'http://196.188.75.58:44319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29b7ccf-1c10-6ca1-d9c5-00008ad2e837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/i","pattern":"[url:value = 'http://175.44.156.36:37033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c82576-47a8-a665-d024-0000d946cbfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43292038-1579-4626-68ac-000009384d0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/nzX44SVMY.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/nzX44SVMY.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfa41bb-0d37-e4f2-32e3-000089773134","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlc.zip","pattern":"[url:value = 'https://colibrik.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2457642-3fb5-5ee9-1d60-0000f8bb77bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.81.174:41032/i","pattern":"[url:value = 'http://222.139.81.174:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ddf9ed-79db-6789-515d-00006850f260","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/i","pattern":"[url:value = 'http://39.78.182.86:43103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c74e3d9-88f4-b2c4-e0a6-000054155e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/bin.sh","pattern":"[url:value = 'http://45.233.94.135:35449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba266b1-828d-9332-a498-00003b95df67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/i","pattern":"[url:value = 'http://45.233.94.135:35449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd9f9db-1958-ff34-0fff-00004fdbaff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/bin.sh","pattern":"[url:value = 'http://202.163.107.242:56229/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bea273-bd2a-b23c-f8d9-00001229d3b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://159.255.31.48:59678/i","pattern":"[url:value = 'http://159.255.31.48:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae111770-ead6-915c-ec44-0000cfb48934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc","pattern":"[url:value = 'http://91.192.81.41:8080/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c877b0-9497-992a-0069-0000c4e91e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_64","pattern":"[url:value = 'http://91.192.81.41:8080/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a326be-e896-11dd-410a-0000b7b7e741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86","pattern":"[url:value = 'http://91.192.81.41:8080/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b1d325-99a8-4c1b-1a8e-0000dc83d45b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm6","pattern":"[url:value = 'http://91.192.81.41:8080/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db43f527-1775-162f-4ab4-00004f6a10c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/sh4","pattern":"[url:value = 'http://91.192.81.41:8080/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcef90f-b35f-6eca-1267-00004688b74b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mips","pattern":"[url:value = 'http://91.192.81.41:8080/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a129b9f-458f-0358-b509-000063359880","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc440","pattern":"[url:value = 'http://91.192.81.41:8080/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dc26c0-bbcd-4d37-5e20-00002962ced2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_32","pattern":"[url:value = 'http://91.192.81.41:8080/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e2cdd9-d022-61fd-90bd-0000467e6191","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/m68k","pattern":"[url:value = 'http://91.192.81.41:8080/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb6e3b3-302f-f990-2887-0000643fb33e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm7","pattern":"[url:value = 'http://91.192.81.41:8080/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e1c3fc6-fd15-8c94-68b1-00002d8bd901","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mpsl","pattern":"[url:value = 'http://91.192.81.41:8080/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b8829f-b2e8-d441-8e41-0000ce367bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm5","pattern":"[url:value = 'http://91.192.81.41:8080/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667b91b2-379f-e55a-a207-00009d217c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm","pattern":"[url:value = 'http://91.192.81.41:8080/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cce24f5-2eea-626d-bff7-0000ca4dfaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/bin.sh","pattern":"[url:value = 'http://27.152.10.88:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1525bd4-5ca4-e347-27ef-0000a2dc6cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/bin.sh","pattern":"[url:value = 'http://105.225.189.234:48747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8bf476a-f493-4df9-af1d-000055d07c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.4.133:60713/i","pattern":"[url:value = 'http://125.41.4.133:60713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70992961-7377-d028-7ce6-000070f650c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/982cd0","pattern":"[url:value = 'http://5.182.210.174/982cd0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb96d9c-2b66-dcae-5296-000062911a16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d834af","pattern":"[url:value = 'http://5.182.210.174/d834af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028a1280-eade-ff68-baf0-000060da44c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14acdf","pattern":"[url:value = 'http://5.182.210.174/14acdf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ae244-9664-2c0e-471d-0000641349f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a0ec06","pattern":"[url:value = 'http://5.182.210.174/a0ec06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37744b91-4ffb-eeff-3643-00004c42b4b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/597d4b","pattern":"[url:value = 'http://5.182.210.174/597d4b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d49ec0-b1b5-f6e9-f9e4-00000ba56265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e04f45","pattern":"[url:value = 'http://5.182.210.174/e04f45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55c1155-781f-df0b-d2b0-0000af0597cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/797dff","pattern":"[url:value = 'http://5.182.210.174/797dff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14858b9b-9871-2a19-4a89-000040952484","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f82d25","pattern":"[url:value = 'http://5.182.210.174/f82d25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3009232d-9c74-c695-95d6-000003965fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1294b8","pattern":"[url:value = 'http://5.182.210.174/1294b8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13bc35f-7b51-598b-e341-0000c24a414b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/370ef8","pattern":"[url:value = 'http://5.182.210.174/370ef8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02403f8-beaa-8120-e457-0000588fd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aede8d","pattern":"[url:value = 'http://5.182.210.174/aede8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36387ce4-9d09-3ff9-27fa-0000f115b380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c060bd","pattern":"[url:value = 'http://5.182.210.174/c060bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bc4842e-230e-36c3-5931-0000054375e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74d9f9","pattern":"[url:value = 'http://5.182.210.174/74d9f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c725c74e-7d19-081c-6f67-000041cd706d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79743e","pattern":"[url:value = 'http://5.182.210.174/79743e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7561d69b-e2d3-cfbb-36ab-0000e8e7219d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8a90f5","pattern":"[url:value = 'http://5.182.210.174/8a90f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfde209f-47c3-3341-c331-0000f6d661dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/08040b","pattern":"[url:value = 'http://5.182.210.174/08040b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04cc01de-6547-d759-5d3f-0000f8a8e24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4af73","pattern":"[url:value = 'http://5.182.210.174/b4af73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a0a1e-7776-fd2b-0be0-0000f8f4ca22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90e1de","pattern":"[url:value = 'http://5.182.210.174/90e1de']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9663bf23-e729-f5f9-afd0-0000799b3f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7202b4","pattern":"[url:value = 'http://5.182.210.174/7202b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19389b66-0e44-10e6-4b43-0000029b196a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ef423","pattern":"[url:value = 'http://5.182.210.174/6ef423']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7687d518-acc9-c28c-2dad-000069d090c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d97308","pattern":"[url:value = 'http://5.182.210.174/d97308']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72825d66-5d50-4e47-0a5b-0000b48f335b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d19a37","pattern":"[url:value = 'http://5.182.210.174/d19a37']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89aaf4e0-efd3-f9fe-1ff0-00001b47fbc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae9a6b","pattern":"[url:value = 'http://5.182.210.174/ae9a6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0107a68-df77-d16e-3b3e-00007ad55e8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5a848f","pattern":"[url:value = 'http://5.182.210.174/5a848f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99d15cc-66df-052f-9d6b-0000d5c823be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50edcc","pattern":"[url:value = 'http://5.182.210.174/50edcc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e427499-e325-ab43-b61a-0000d5355ae1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/846cac","pattern":"[url:value = 'http://5.182.210.174/846cac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eb4a44-0d31-df81-6600-0000beabfc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba641b","pattern":"[url:value = 'http://5.182.210.174/ba641b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6450097-be23-e833-5379-00000a9c5e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85a4f4","pattern":"[url:value = 'http://5.182.210.174/85a4f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc2c4a8-a5b7-b1a4-9958-0000f9e1f85c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b6973a","pattern":"[url:value = 'http://5.182.210.174/b6973a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ab5890d-0e11-ef34-65f7-0000ade4b296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/29ea88","pattern":"[url:value = 'http://5.182.210.174/29ea88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5245a95b-46f3-361e-a769-0000edec3612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/adb88f","pattern":"[url:value = 'http://5.182.210.174/adb88f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408deab6-8342-b22a-ddca-0000023d23b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7a381","pattern":"[url:value = 'http://5.182.210.174/b7a381']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180aace0-8f8d-87ba-7cf0-0000bff38fed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/24dc12","pattern":"[url:value = 'http://5.182.210.174/24dc12']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc500059-843b-637f-13e8-0000fc7001b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8b233","pattern":"[url:value = 'http://5.182.210.174/b8b233']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e334fee-508c-1195-f18d-00009f3b8a56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e7b8f7","pattern":"[url:value = 'http://5.182.210.174/e7b8f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d1e986-fbbe-227a-e605-00006fa68853","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b87566","pattern":"[url:value = 'http://5.182.210.174/b87566']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d2d840-0a91-3ecd-a045-0000a5d034b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/i","pattern":"[url:value = 'http://27.152.10.88:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fc036a-d8ef-23ab-0fb3-00002e10e6ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5fb90f-1b81-571e-392f-000031f95b1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlc.zip","pattern":"[url:value = 'https://kee126.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f72245-874c-318b-d660-0000064c2b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://130.12.209.153:51945/i","pattern":"[url:value = 'http://130.12.209.153:51945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639331b3-a93f-4643-5951-00009c35c0c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.61.118.232:57819/i","pattern":"[url:value = 'http://115.61.118.232:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96811a4c-efc7-a7ab-8e82-0000a76478f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.92.221:44835/i","pattern":"[url:value = 'http://163.142.92.221:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126e01ca-293e-e122-493e-0000db5f2b34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/bin.sh","pattern":"[url:value = 'http://221.14.36.34:39539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61b2340-fed0-8da4-5f29-0000b0207615","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9162d4-9692-5269-5fa1-0000ae3572ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://onlypackaging.grupoinde.com/zz/crypted.ps1","pattern":"[url:value = 'https://onlypackaging.grupoinde.com/zz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacda4f4-401a-face-3655-000069055988","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74346a","pattern":"[url:value = 'http://5.182.210.174/74346a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1558a8-06bd-8f8e-b339-00003ca27a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/58e1a8","pattern":"[url:value = 'http://5.182.210.174/58e1a8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1306e3b5-0cb8-542b-2ac4-0000abd37c5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/905a41","pattern":"[url:value = 'http://5.182.210.174/905a41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1214ac-b74d-b4a7-9656-0000f9034788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acaa53","pattern":"[url:value = 'http://5.182.210.174/acaa53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daac44ed-cb2c-2f4f-9aa4-00001e396345","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bfe63f","pattern":"[url:value = 'http://5.182.210.174/bfe63f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922a675e-79a7-4eaf-b85e-000063537230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4c7cb5","pattern":"[url:value = 'http://5.182.210.174/4c7cb5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c8be5c-768e-cdea-70b5-00007e295b99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/efeb39","pattern":"[url:value = 'http://5.182.210.174/efeb39']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be63e47b-19bd-74ad-ae12-0000427bc4ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7d4dfe","pattern":"[url:value = 'http://5.182.210.174/7d4dfe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c952eea1-6805-3c14-cd51-000069549c8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eaa22","pattern":"[url:value = 'http://5.182.210.174/3eaa22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1db5eeb-f0e0-201c-7006-000064f801c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e3530c","pattern":"[url:value = 'http://5.182.210.174/e3530c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00d739a5-4305-71bb-abba-00003df610e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/89e244","pattern":"[url:value = 'http://5.182.210.174/89e244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e7516f-0135-c77b-47d8-00002a33d28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/699b25","pattern":"[url:value = 'http://5.182.210.174/699b25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3011ef7-5f79-3e04-89ae-0000e7bb2f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/i","pattern":"[url:value = 'http://221.14.36.34:39539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d44ca4-be16-d6a4-9153-0000f775a656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:47543/i","pattern":"[url:value = 'http://125.47.87.135:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7140dba-4d3e-f87f-ca20-000093cb948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0d23de-cbc3-5130-ca9e-0000b3795656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.139/Xloadfile/bin.exe","pattern":"[url:value = 'http://195.177.94.139/Xloadfile/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9b6442-a4a1-4245-1c3a-0000e124f874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlccz.zip","pattern":"[url:value = 'https://colibrik.com/vlccz.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c7cb87-3111-b129-8ff4-00003d0211ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/bin.sh","pattern":"[url:value = 'http://42.239.240.192:35535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6143ffce-4f61-4420-fc87-000013b613dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/bin.sh","pattern":"[url:value = 'http://125.45.10.162:57743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3dc715-0003-1291-d38f-000032482940","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.63.144:39989/i","pattern":"[url:value = 'http://105.184.63.144:39989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44573107-0353-432f-cdc0-0000c26b908a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/i","pattern":"[url:value = 'http://42.239.240.192:35535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa20572-398f-c504-d1de-0000e6accfeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/bin.sh","pattern":"[url:value = 'http://222.139.94.187:45764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c2a2c1-0b1d-38c8-e5f7-00008d40c488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.157.243.235:47252/bin.sh","pattern":"[url:value = 'http://91.157.243.235:47252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--800151e9-1c40-b738-8943-000086e2f282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/i","pattern":"[url:value = 'http://222.139.94.187:45764/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5225f8d6-7e89-3dc8-ee4c-0000ea13b38c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.4.180:60816/i","pattern":"[url:value = 'http://42.179.4.180:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde6d48f-0d11-0b34-2515-0000b2225e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/bin.sh","pattern":"[url:value = 'http://42.235.171.234:44993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a416b4-e6ad-b817-d518-0000fb02c15c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/i","pattern":"[url:value = 'http://60.184.140.145:34890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3633620d-5c0d-235d-3337-000014b5bef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/i","pattern":"[url:value = 'http://42.85.28.108:53934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3dd1e0-592e-cf0b-7039-00009ddf2d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.15.53:45156/bin.sh","pattern":"[url:value = 'http://42.54.15.53:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a136c67-0f6c-3130-aa76-0000f418fd14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/i","pattern":"[url:value = 'http://42.52.206.146:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf522c73-96a1-b49d-09c7-00001e95c81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/bin.sh","pattern":"[url:value = 'http://196.188.75.58:44319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb90b9a-2dc9-9344-a9ed-000055bbaaf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.163.85.239:39124/bin.sh","pattern":"[url:value = 'http://45.163.85.239:39124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d064785-cf80-3c69-3941-000045d3e07f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/bin.sh","pattern":"[url:value = 'http://42.52.206.146:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ebe9ee7-bc6c-f288-3daa-00009bc0ba1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.15.53:45156/i","pattern":"[url:value = 'http://42.54.15.53:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73854b15-af3c-584c-b492-000060c4c527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/bin.sh","pattern":"[url:value = 'http://182.130.209.58:35031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06dd4793-8e46-f163-ef12-00004c7934aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.127.49.161:56955/bin.sh","pattern":"[url:value = 'http://222.127.49.161:56955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--990be191-5fe6-28ca-4b6b-0000d8108cd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/bin.sh","pattern":"[url:value = 'http://91.234.61.90:34549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50180be2-ce50-7468-f056-0000ae8800ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/bin.sh","pattern":"[url:value = 'http://42.85.28.108:53934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368437bf-d946-03be-3366-000040a61bb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.49.161:56955/i","pattern":"[url:value = 'http://222.127.49.161:56955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd209f27-dc99-ad0b-8724-000004c3a32b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/i","pattern":"[url:value = 'http://91.234.61.90:34549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e80f53-e0de-b82a-9fc2-0000b3c5a376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.26.85:51916/bin.sh","pattern":"[url:value = 'http://42.5.26.85:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61125e88-7c4c-4131-c138-0000ccd10e65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:47551/i","pattern":"[url:value = 'http://196.189.130.28:47551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1301fa-b28a-b5ab-2bf6-0000d180c369","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/bin.sh","pattern":"[url:value = 'http://42.87.111.88:33491/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed3b46d-ef38-c1f7-2c3c-00002b0af5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/bin.sh","pattern":"[url:value = 'http://42.235.140.235:50010/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeebacfa-668d-f447-bf35-0000794f7b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.75.38.154:4194/i","pattern":"[url:value = 'http://211.75.38.154:4194/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dac89b7-9557-e777-e6fd-000001466187","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/i","pattern":"[url:value = 'http://42.235.140.235:50010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c24dccf-3c8f-a42d-e139-00007f0bfa2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/i","pattern":"[url:value = 'http://42.235.171.234:44993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7861352-8ef4-0844-3b7b-0000fe7ad820","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.148.182:60566/i","pattern":"[url:value = 'http://42.239.148.182:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9e13af-4b2a-c99c-ed20-0000500aa0a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.178.45.124:57472/i","pattern":"[url:value = 'http://42.178.45.124:57472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3039d9c9-df81-a273-0287-000065f71e0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/i","pattern":"[url:value = 'http://183.159.187.179:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd33ae32-667b-87b9-69c1-00005ccd84fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/bin.sh","pattern":"[url:value = 'http://183.159.187.179:34226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717b29e-9bb8-f25c-5236-000056db997e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.38.16.176:54968/i","pattern":"[url:value = 'http://78.38.16.176:54968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7639b0db-08f9-0998-af87-0000ce6ab9b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.21.251.3:42743/bin.sh","pattern":"[url:value = 'http://58.21.251.3:42743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f296bfd6-2f7c-e59b-4f16-0000074388d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.136.165:55956/i","pattern":"[url:value = 'http://59.180.136.165:55956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e0b4c0-ac72-633e-c5b2-0000457a5a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/bin.sh","pattern":"[url:value = 'http://182.244.41.109:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae6e86-d23a-cd3e-a02d-0000dbdeead0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/i","pattern":"[url:value = 'http://125.45.10.162:57743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afdc6276-90be-6ea7-308f-00007ca4c639","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.224.231:49757/i","pattern":"[url:value = 'http://123.10.224.231:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c9c52a-2eaf-9517-4c95-00009599df24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/bin.sh","pattern":"[url:value = 'http://42.235.49.187:35712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e39d7fc-6253-4627-f9a2-0000d9d414d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.202/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6ecaaa-2a00-53cc-7368-0000bb86eea8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.202/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3f8d91-e219-6d87-63d0-000030ec5c19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd5cac5-84e2-866e-64b0-0000a4be08b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8705b98c-3299-bbba-f40c-0000593446b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.i486","pattern":"[url:value = 'http://176.65.139.202/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f91fc6-9c9f-8bae-de85-0000686feb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.arc","pattern":"[url:value = 'http://176.65.139.202/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f3ed90-295e-bca5-5d46-0000c601d3a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/a.sh","pattern":"[url:value = 'http://176.65.139.202/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c795654-ed42-f84f-0136-00005afbf084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.202/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--846e3409-60c4-3592-a426-0000ea87c10d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee3a847-9939-68a5-d5cb-0000de7e5bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665997f6-61ed-dd49-dd48-00006988bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.202/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f89906-4670-c1d9-f545-0000e31e7266","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5215e32a-6304-ba35-7072-0000d922c20e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mips","pattern":"[url:value = 'http://176.65.139.202/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35cefb84-666e-94c3-0a1d-000099de2106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e661d8-6f46-63b2-8fc6-000042633ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.202/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a689a64-9ad0-cea9-e9a6-0000736fadc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/bin.sh","pattern":"[url:value = 'http://125.47.59.152:33986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7083b5aa-9c0a-3f6f-1296-0000cd9a150f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/bin.sh","pattern":"[url:value = 'http://124.234.219.153:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39c0f91-79bf-4131-5c43-00007686542a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/i","pattern":"[url:value = 'http://42.235.49.187:35712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68636258-28c4-5eae-ce37-000015a90309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/bin.sh","pattern":"[url:value = 'http://123.132.182.114:59660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736cc10b-31d2-fb3c-74ea-00006ec66140","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/i","pattern":"[url:value = 'http://125.47.59.152:33986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11222c30-032a-d52b-270a-00003c4c8a65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.228.140.10:33110/i","pattern":"[url:value = 'http://113.228.140.10:33110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f49cc-3a0a-8b6a-02ed-0000ab1b8280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c83d114-1dee-7744-5f7b-000003cb689a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/i","pattern":"[url:value = 'http://123.132.182.114:59660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21d4aa0-bae7-038b-3e60-0000449ed36a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/i","pattern":"[url:value = 'http://42.231.79.131:52303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58e78b1-3609-c740-0eca-0000dd0c8ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.sh4","pattern":"[url:value = 'http://94.154.43.181/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b4184f-36f9-9ca1-bfdd-0000c1a760c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm7","pattern":"[url:value = 'http://94.154.43.181/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc8f1f0-e7d3-5d84-3fac-0000d9aaaccc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mipsel","pattern":"[url:value = 'http://94.154.43.181/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0dc9ae6-4f13-eb46-8567-00005dd21513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.ppc","pattern":"[url:value = 'http://94.154.43.181/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0761ebbe-39a8-885d-dc72-0000bc89ed5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.aarch64","pattern":"[url:value = 'http://94.154.43.181/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54588c3b-d5c7-7826-1b91-00002ece410a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.i686","pattern":"[url:value = 'http://94.154.43.181/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b61c24-256e-1ae7-255c-00000f47e07e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm","pattern":"[url:value = 'http://94.154.43.181/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1aeeb97-49c9-9c3c-4148-000080ce4ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.x86_64","pattern":"[url:value = 'http://94.154.43.181/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cc02f3-aa1d-97f9-1284-0000e31064bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mips","pattern":"[url:value = 'http://94.154.43.181/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9321d318-254a-d5a7-9146-0000003f3177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/adbpersist.arm7","pattern":"[url:value = 'http://94.154.43.210/adbpersist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3896cf5d-b5e1-2808-3033-0000c51c0585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/ppc","pattern":"[url:value = 'http://94.154.43.210/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17446498-bc2b-2b70-c0f9-0000775687db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arc","pattern":"[url:value = 'http://94.154.43.210/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aff381e-aa8b-4df9-9642-0000d85398a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm7","pattern":"[url:value = 'http://94.154.43.210/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8722a2-ce9e-0458-f6b7-0000fae49cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mips","pattern":"[url:value = 'http://94.154.43.210/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df80888-1de1-3734-0478-000060efffcd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm6","pattern":"[url:value = 'http://94.154.43.210/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc42d0a-74d8-45e1-efd0-000045c29c73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/sh4","pattern":"[url:value = 'http://94.154.43.210/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0fc499f-00f5-4030-69b5-00009789f0e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm","pattern":"[url:value = 'http://94.154.43.210/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b55e46b-e271-4dd3-7ee0-000091e7f297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mpsl","pattern":"[url:value = 'http://94.154.43.210/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ab1674-0481-8c1e-906f-0000fa124a07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/m68k","pattern":"[url:value = 'http://94.154.43.210/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80102f9b-0450-5b41-ee0e-00000a9b3a36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/i","pattern":"[url:value = 'http://36.70.235.87:40268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ad07104-e640-c9bd-8832-00004388772b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/spc","pattern":"[url:value = 'http://94.154.43.210/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f15932-d789-639a-a7e5-0000725a5023","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm5","pattern":"[url:value = 'http://94.154.43.210/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9aca7b-c999-1926-7f9d-00008d1d875b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mips","pattern":"[url:value = 'http://94.154.43.85/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff1d4b1-8c82-6067-1c7d-00001f0413e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv6l","pattern":"[url:value = 'http://94.154.43.85/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c0e44b3-74b8-5238-d9d4-000040c3a2ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/i686","pattern":"[url:value = 'http://94.154.43.85/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa2df167-f4d4-a315-2e0c-0000f1961428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mipsel","pattern":"[url:value = 'http://94.154.43.85/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6eae5f0-a2ec-efaa-06bc-000022643a57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv7l","pattern":"[url:value = 'http://94.154.43.85/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e808e3fc-3f57-7a3c-b9bc-00003320e7ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/amd64","pattern":"[url:value = 'http://94.154.43.85/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ea3215-97b0-d599-34c8-000043347bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/x86","pattern":"[url:value = 'http://94.154.43.85/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b4c409-049f-c1eb-e0a6-0000983d1bec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/ppc64","pattern":"[url:value = 'http://94.154.43.85/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4dc8772-135a-b5c4-80b1-000058a46937","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv5l","pattern":"[url:value = 'http://94.154.43.85/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fda927f-f031-afcb-e268-00008eaab9be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.53.157:42588/Mozi.a","pattern":"[url:value = 'http://39.61.53.157:42588/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c757a2-f30f-d7f9-2ad3-0000de7050e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/bin/support.client.exe","pattern":"[url:value = 'http://203.159.90.118/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7780072-c4f2-9f74-8e89-0000fddd0049","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d85783f-b0eb-5cc7-0e37-0000a17563cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/bin/support.client.exe","pattern":"[url:value = 'http://192.159.99.42/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44488e7b-747b-2c14-b446-000071d5be3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb652e09-61e6-fa50-a4f0-0000cd78e211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cfa1bf-da95-ee81-f3b1-000086b3aea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e0207d","pattern":"[url:value = 'http://5.182.210.174/e0207d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf135bc-1030-4d3c-5fe5-000050b942bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d81575","pattern":"[url:value = 'http://5.182.210.174/d81575']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1841a6b-61e5-ecba-f8a9-0000ea0cdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14f97a","pattern":"[url:value = 'http://5.182.210.174/14f97a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5b0dac-da70-0879-df0d-00006d0317b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c02601","pattern":"[url:value = 'http://5.182.210.174/c02601']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6806881-a5fd-085f-996b-0000541d5660","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61e952","pattern":"[url:value = 'http://5.182.210.174/61e952']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--780c51b9-60b4-4f6a-b6c5-000094efa077","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/005679","pattern":"[url:value = 'http://5.182.210.174/005679']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884b6749-dcdc-6109-cbbb-0000408f9611","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98fab6","pattern":"[url:value = 'http://5.182.210.174/98fab6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2820f8a2-c281-81e8-3c85-0000c98187f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/829f73","pattern":"[url:value = 'http://5.182.210.174/829f73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6f93b9-51e7-f705-6488-0000b99825dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://v-k.com.ua/vcapcha.ps1","pattern":"[url:value = 'http://v-k.com.ua/vcapcha.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515e4aa1-79eb-8bb4-754c-0000aa89a9d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/197001","pattern":"[url:value = 'http://5.182.210.174/197001']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d0215-3b30-f1e8-ba7e-0000f2194b87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70504f","pattern":"[url:value = 'http://5.182.210.174/70504f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39cc98c-3402-d067-1800-0000ffd814c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2cd0c9","pattern":"[url:value = 'http://5.182.210.174/2cd0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449232b6-3ff2-fdaa-7d65-0000c6d46151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0eede3","pattern":"[url:value = 'http://5.182.210.174/0eede3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c45bb50-1b1a-07ed-348f-0000994da93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11700068-b3af-c0f0-d637-0000e2b7ae1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/bin/support.client.exe","pattern":"[url:value = 'http://94.154.32.180/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78b3582-b71a-de94-01b9-0000ce9c12f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bce7e5-f4aa-e5ca-5a1b-000088b7cd9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.68/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a980d5-26f6-ee62-fb36-0000ebbd31e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4949a4-2a9a-703f-afcb-000004bcbd77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.205/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbaac499-0f80-a673-11ba-00009f219ed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acba074c-08bc-ca53-9907-0000e903fdf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.55.26.114:46700/i","pattern":"[url:value = 'http://116.55.26.114:46700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dab7761-b8f5-a27f-1351-00009c197185","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/i","pattern":"[url:value = 'http://105.225.189.234:48747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdfaa030-3395-e540-b890-000023720718","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.94.220:54475/i","pattern":"[url:value = 'http://163.142.94.220:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c582fa-b2de-1ab5-aefe-0000ae9e7f79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/bin.sh","pattern":"[url:value = 'http://182.116.20.246:39870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a59358-d6c8-c13f-807e-00006a09b410","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.54.109/spamget.exe","pattern":"[url:value = 'http://178.16.54.109/spamget.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91a6ddd-bdda-9683-fb20-00005c160ff4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/bin.sh","pattern":"[url:value = 'http://222.142.244.196:59371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817c1070-e47f-2c89-5061-0000b3f60239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/Mozi.a","pattern":"[url:value = 'http://113.228.208.46:56903/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a81c22-d2c2-f99f-1f7c-0000f1c5a165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.144.211:51836/bin.sh","pattern":"[url:value = 'http://59.180.144.211:51836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8340af0a-23b1-2538-4de6-0000a6a2214d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/i","pattern":"[url:value = 'http://222.142.244.196:59371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1deccde2-6d93-da8c-2f4d-000089f8462d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.237.221:39602/i","pattern":"[url:value = 'http://125.42.237.221:39602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce9a0b0-b4e6-2bdb-031b-000046f95d17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.87.19:46712/bin.sh","pattern":"[url:value = 'http://163.142.87.19:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e534a33-9b17-38c8-a7ab-00002aafb928","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.230:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11157509-2502-2930-5201-0000c4321768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/i","pattern":"[url:value = 'http://46.236.65.230:33052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd350540-ff2f-3139-e5d7-0000af28f8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/bin.sh","pattern":"[url:value = 'http://61.52.158.83:45555/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5656b29-276e-131d-0854-0000783b1faf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.46.143:53645/bin.sh","pattern":"[url:value = 'http://39.61.46.143:53645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b31cd-5895-cd0f-a235-000021398ef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/bin.sh","pattern":"[url:value = 'http://115.194.179.106:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--253d5e53-7882-490e-863a-0000e6dce9a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/i","pattern":"[url:value = 'http://42.59.235.202:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c7ff8c-8d82-eb63-928d-00008a7d0d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.178.159:48639/i","pattern":"[url:value = 'http://115.201.178.159:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--557f1a91-cf13-4f42-3cfd-00007830014a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/i","pattern":"[url:value = 'http://61.52.158.83:45555/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac30290-09fa-bb44-2fa0-0000393e0cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/i","pattern":"[url:value = 'http://115.194.179.106:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475a98da-1dde-586a-d50f-0000464e4df7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.4.254.241:52598/bin.sh","pattern":"[url:value = 'http://31.4.254.241:52598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1777cdf5-057b-8fbb-fec2-0000f74cb91e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://117.26.82.102:41542/i","pattern":"[url:value = 'http://117.26.82.102:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05683afb-d957-e8b5-171e-00002b27ee89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.251.126:60468/bin.sh","pattern":"[url:value = 'http://61.137.251.126:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86d8555-a636-e857-5483-0000ebf6d8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.112.59.91:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.91:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--166d6296-c8de-86d8-255b-00006920953a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.251.126:60468/i","pattern":"[url:value = 'http://61.137.251.126:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063f5e7f-fb48-bf89-9ed7-000039853722","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://68.168.20.218:18081/f8YlUiZDcEOZ","pattern":"[url:value = 'http://68.168.20.218:18081/f8YlUiZDcEOZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb7bd1b-8850-f6d5-1636-0000e06bffce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/bin.sh","pattern":"[url:value = 'http://115.49.64.122:48159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--242db813-5c9e-d8e5-a512-000083d52066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.91:60395/i","pattern":"[url:value = 'http://125.112.59.91:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f03eda-3d3d-b22a-7f2f-000088101c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/i","pattern":"[url:value = 'http://115.49.64.122:48159/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138a9e34-1efe-2cb7-f73b-000035bbc55b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.94:37532/bin.sh","pattern":"[url:value = 'http://113.221.25.94:37532/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8617ae2f-d268-dc94-00e1-000074305055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60afb36-ac46-424f-afcc-0000c30d0d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/bin.sh","pattern":"[url:value = 'http://124.131.166.85:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed4c5035-53d7-c7c8-bc1f-0000130732d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/i","pattern":"[url:value = 'http://124.131.166.85:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1a58de8-c059-8709-168d-00007b167566","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/i","pattern":"[url:value = 'http://58.208.16.203:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36cd8ed-e69a-0264-743b-000058a9648a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/bin.sh","pattern":"[url:value = 'http://58.208.16.203:3588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebbc599-bffe-80fe-901b-0000ec8a8fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.60.37:49335/i","pattern":"[url:value = 'http://175.173.60.37:49335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cb8e-06d8-fb1b-7aa5-0000b400f8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.243.79:60816/i","pattern":"[url:value = 'http://175.147.243.79:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c8a6fb4-a37b-1be6-1983-0000d9290e78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/i","pattern":"[url:value = 'http://182.116.51.119:37449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0faedb9-fe1d-607e-a22a-000088411632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/bin.sh","pattern":"[url:value = 'http://182.116.51.119:37449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834af59-ec5a-ece7-87f3-00009f30043a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/bin.sh","pattern":"[url:value = 'http://220.192.234.145:55381/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1230ac04-9d5e-e5c1-dcf2-0000d7142e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/i","pattern":"[url:value = 'http://220.192.234.145:55381/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76de7735-4186-13bf-1df9-0000d7c37241","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/bin.sh","pattern":"[url:value = 'http://42.177.103.199:46495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2d0abb-627d-a608-76c4-0000824de02b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/i","pattern":"[url:value = 'http://42.177.103.199:46495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3926464-1fb4-919c-0e11-0000a4387a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325591.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325591.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35de0067-40c4-0890-a3e8-0000d88567ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/bin.sh","pattern":"[url:value = 'http://85.15.117.156:37936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834bc3a-b322-2473-c851-0000b44e30d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/bin.sh","pattern":"[url:value = 'http://222.138.117.213:54917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3c5946-2202-4967-9e77-0000c4772e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/i","pattern":"[url:value = 'http://222.138.117.213:54917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174f0547-093c-3226-4dab-00001ab776b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/i","pattern":"[url:value = 'http://85.15.117.156:37936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318bb507-91e4-9658-6301-000012e1534f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/bin.sh","pattern":"[url:value = 'http://123.8.162.45:59164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69134f98-26d1-063f-dd60-0000f429be9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.177.126:57685/i","pattern":"[url:value = 'http://175.150.177.126:57685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7457757-87cb-4f90-a37d-0000fb4d2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-04.cfd/installer.exe","pattern":"[url:value = 'https://mon-blanc-04.cfd/installer.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4783db32-5e8f-140b-0d0e-0000c5e4ba59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/bin.sh","pattern":"[url:value = 'http://105.158.197.238:53233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7482c5-f09b-ea9e-018a-00003dcf5e27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.60.89:60712/i","pattern":"[url:value = 'http://112.248.60.89:60712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e401b04-f18c-3cf3-86b9-00002c956726","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7154708060/EcHFKBJ.exe","pattern":"[url:value = 'http://62.60.226.140/files/7154708060/EcHFKBJ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223ea20e-bfe3-92ad-529c-0000a3b8ab46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/i","pattern":"[url:value = 'http://105.158.197.238:53233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5829898-513d-1a0b-07fe-0000bd584e3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/bin.sh","pattern":"[url:value = 'http://123.8.30.116:41163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e629510-4131-e83e-c2d4-000047da98bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/bin.sh","pattern":"[url:value = 'http://179.108.90.55:37440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ccc8b3-f773-b0d6-fe89-0000a29fd64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/i","pattern":"[url:value = 'http://123.8.30.116:41163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1df21c5-5a1a-3657-8067-0000f9e1cb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/6680549914/ENKpzg6.exe","pattern":"[url:value = 'http://62.60.226.140/files/6680549914/ENKpzg6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd87431-f2cf-c3e7-ef80-000012842cb2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.163.131:49762/i","pattern":"[url:value = 'http://182.120.163.131:49762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f767f3d-d937-7acb-a020-0000c9048232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/i","pattern":"[url:value = 'http://179.108.90.55:37440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35f1270-fe9f-2f51-5bec-000023a7119b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.127.198:37040/i","pattern":"[url:value = 'http://113.231.127.198:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddc8f5c-3c00-5a14-f534-0000a2ae88fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/i","pattern":"[url:value = 'http://221.15.214.165:40665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bfc913b-821f-0226-0266-000000194ac8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.183.167:47451/i","pattern":"[url:value = 'http://42.235.183.167:47451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab2fc298-66fe-d425-0887-0000556b24d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/bin.sh","pattern":"[url:value = 'http://123.132.158.53:41696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efaa86af-efa5-224b-c9ad-00007d882a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/bin.sh","pattern":"[url:value = 'http://182.116.20.77:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c785932c-c41c-6512-e353-0000029f549b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.228.132.133:38637/i","pattern":"[url:value = 'http://114.228.132.133:38637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32526d2-61cb-d587-8963-0000f2a1f370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/i","pattern":"[url:value = 'http://123.132.158.53:41696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94d335f7-4de2-f995-3a28-0000f91661b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/bin.sh","pattern":"[url:value = 'http://116.138.108.78:35117/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91754006-adf7-2dea-d3e5-000020edf33b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/i","pattern":"[url:value = 'http://42.225.15.213:35530/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dbc0749-3289-7e01-99a0-000006ab9adc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.227.126:60165/i","pattern":"[url:value = 'http://182.119.227.126:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8d8f92-6b61-e9fa-eb07-000025f352a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/i","pattern":"[url:value = 'http://182.116.20.77:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edd1a1-7b33-cea6-1016-00006a541896","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/i","pattern":"[url:value = 'http://116.138.108.78:35117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2f9a63-896b-8e89-e7ee-00009e986fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/bin.sh","pattern":"[url:value = 'http://115.54.128.38:41331/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8593c6e-c633-1b65-6a04-0000d77b33e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/bin.sh","pattern":"[url:value = 'http://123.7.223.208:48157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2e4b2c-13a1-928d-dce7-00000a7a6175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/i","pattern":"[url:value = 'http://123.7.223.208:48157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4457a0-7d4b-018d-942e-0000a945560e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/i","pattern":"[url:value = 'http://115.54.128.38:41331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096c1797-fda1-8e8b-bbd1-00004dad4237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.94.45:36545/bin.sh","pattern":"[url:value = 'http://163.142.94.45:36545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c44446c-756c-852c-2707-0000501f782e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/bin.sh","pattern":"[url:value = 'http://115.49.210.219:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efbd282-5155-09cc-345a-00008fa60617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/i","pattern":"[url:value = 'http://115.49.210.219:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02502118-10ce-1efb-3d4f-000001b7f373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.4.17.29:54916/i","pattern":"[url:value = 'http://42.4.17.29:54916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81237645-ecc5-c9b1-cd27-00005925a506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/i","pattern":"[url:value = 'http://222.136.52.188:32973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eaa7e07-7b0d-00df-529b-000076864dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i586","pattern":"[url:value = 'http://222.223.152.97:800/m.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d08b965-b82b-26d3-b0c1-000081b6d12b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.powerpc","pattern":"[url:value = 'http://222.223.152.97:800/m.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f681430-6060-23be-00bc-0000bdda9e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i486","pattern":"[url:value = 'http://222.223.152.97:800/m.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef41ecb-785c-4f21-f8b0-0000071d352b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv6l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef2f8a-7e59-1c51-e6f9-00003a7d1c9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv7l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc27c49-65a1-326a-378b-00007ddd664b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv4l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864e217a-ff35-02b7-fe9a-0000b0ebd1da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.x86_64","pattern":"[url:value = 'http://222.223.152.97:800/m.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cecc05e-9567-bae6-0050-0000f0123f05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i686","pattern":"[url:value = 'http://222.223.152.97:800/m.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da784e96-dad9-5b76-d440-00003dcc1ab3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mips","pattern":"[url:value = 'http://222.223.152.97:800/m.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2254f50-3fe2-e0f4-de7c-0000a42fec71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/lilin.sh","pattern":"[url:value = 'http://222.223.152.97:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d94d08-b543-fe02-1161-000040bd4ffb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv5l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab283b1d-7a9a-ad6e-1a6a-0000e98f32e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mipsel","pattern":"[url:value = 'http://222.223.152.97:800/m.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--970517c5-9582-15ed-5733-000016fb618b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/wget.sh","pattern":"[url:value = 'http://222.223.152.97:800/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e34f6c-eca3-ca57-732b-0000fb599730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.199.146:39260/i","pattern":"[url:value = 'http://182.114.199.146:39260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a704de-5a18-6853-6f05-00005fbfae08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/bin.sh","pattern":"[url:value = 'http://182.119.205.237:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f40afb-0295-8171-4171-00000dd807d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/bin.sh","pattern":"[url:value = 'http://125.46.213.70:33401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d515a2d-9e6b-0e3c-c0b0-000098db44ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/i","pattern":"[url:value = 'http://182.119.205.237:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dede4-aea4-5a8b-3364-0000824eadf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.93.152:51284/i","pattern":"[url:value = 'http://163.142.93.152:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffbb0c1-2c01-3a0d-6aaf-0000aab13c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/bin.sh","pattern":"[url:value = 'http://123.189.148.227:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0152cd6c-0922-a20d-285c-00004e8aee30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/bin.sh","pattern":"[url:value = 'http://103.172.221.97:35084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700ae5ff-991d-a331-8325-000089329f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/i","pattern":"[url:value = 'http://123.189.148.227:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5cd5c-8fc7-d713-84e6-00003fe42d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/i","pattern":"[url:value = 'http://61.54.190.223:33351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cc92c3-394e-bb7b-7dbc-0000b63a0b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/i","pattern":"[url:value = 'http://103.172.221.97:35084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588d5f93-ce88-933a-eea1-0000a509fd59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/bin.sh","pattern":"[url:value = 'http://42.231.89.132:55455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a2bb-0f69-2a66-d341-00001f479a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/i","pattern":"[url:value = 'http://42.231.89.132:55455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d1c671a-c4ad-f60c-3f98-0000db7ac2ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.231:40959/i","pattern":"[url:value = 'http://27.44.145.231:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d607a526-76a5-cf6d-08ca-000085a2a225","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.235.239.18:59915/i","pattern":"[url:value = 'http://124.235.239.18:59915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--929f7570-ab9c-8842-c086-0000927f2e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.63:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af065966-e233-b113-3d68-00003a36b1bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.163.128.185:59951/i","pattern":"[url:value = 'http://61.163.128.185:59951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1875cfe6-67d1-263a-3635-00003514a796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/bin.sh","pattern":"[url:value = 'http://123.14.96.22:48919/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def9848d-2b3f-d14d-3af2-00008615da54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/i","pattern":"[url:value = 'http://123.14.96.22:48919/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03e89ef-a962-e392-3319-00007de8ec7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.36.172:37655/i","pattern":"[url:value = 'http://42.227.36.172:37655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5212dd-cb25-9518-d28d-00008cb6a3ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/bin.sh","pattern":"[url:value = 'http://113.221.25.59:57666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9bcc0df-29bc-d02f-259e-00007b8e1f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/i","pattern":"[url:value = 'http://183.188.77.45:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8ba468-3db0-0c7c-3669-000002b3fc5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/.bash_history","pattern":"[url:value = 'http://150.241.65.80:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2a6193-4f72-51a3-79ab-0000ac7ed0ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://faceit-anti-cheat.com/notify.ps1","pattern":"[url:value = 'http://faceit-anti-cheat.com/notify.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac279d0-6558-c7f7-90eb-0000f26811a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/i","pattern":"[url:value = 'http://113.221.25.59:57666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b092ea7-4b33-fa76-4b88-00005a9abfb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://soft-update.dev/get_verify?i=66695","pattern":"[url:value = 'https://soft-update.dev/get_verify?i=66695']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6d1da3-d75b-6786-7ed4-0000e327d7a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Drastok.application","pattern":"[url:value = 'https://drastok.xyz/installer/Drastok.application']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3442905-da4a-6c49-2dc3-0000c74a9dc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://auth2api.site/API_REFRESH.scpt","pattern":"[url:value = 'https://auth2api.site/API_REFRESH.scpt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e44a594c-0847-c173-fe88-000070867f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.54.25.213/d/unix49211821","pattern":"[url:value = 'http://86.54.25.213/d/unix49211821']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d7f22b-c2a9-3efe-af9c-0000fe532823","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy","pattern":"[url:value = 'https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfeda948-e6b2-4cd2-31e2-00002b81000c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/gg11","pattern":"[url:value = 'http://150.241.65.80:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a8d82a-2e00-bb63-c18b-00005040e2d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF","pattern":"[url:value = 'https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff8b0a3-72b7-1e5c-44b4-000078eb720e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67eefd","pattern":"[url:value = 'http://5.182.210.174/67eefd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32127dfb-0210-e0be-235e-000024cfaf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d9d6f9","pattern":"[url:value = 'http://5.182.210.174/d9d6f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddbe3b1-fc0c-86dd-be9f-000054b87af7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20302a69-5055-d361-3ea8-0000fac249a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b85c0","pattern":"[url:value = 'http://5.182.210.174/2b85c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba776bd-228a-5aff-aa4c-00000827c06d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2c07b9","pattern":"[url:value = 'http://5.182.210.174/2c07b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0856071-8688-2956-04b3-0000596a5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d95abb","pattern":"[url:value = 'http://5.182.210.174/d95abb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59617dd3-d0ef-c3d1-6e24-0000db9d98eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/334215","pattern":"[url:value = 'http://5.182.210.174/334215']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86db2a11-25e9-5c3e-9a09-000097f84b1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7c899f","pattern":"[url:value = 'http://5.182.210.174/7c899f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e2f716-9d45-fe87-eb90-0000f9246e51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5adf18","pattern":"[url:value = 'http://5.182.210.174/5adf18']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9209980-b8fc-f15c-d9e5-00008eae4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f6f76d","pattern":"[url:value = 'http://5.182.210.174/f6f76d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--689836ba-260e-2cd5-f73c-00004b77b403","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da8d2e","pattern":"[url:value = 'http://5.182.210.174/da8d2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff844d2-f7c5-c91e-5565-00005d085400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9922af","pattern":"[url:value = 'http://5.182.210.174/9922af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d0aa27-f327-6bf2-c35c-00001b4f9355","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/http","pattern":"[url:value = 'http://5.182.210.174/http']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669e796f-4d1f-160f-8974-00005eb7b529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9b83","pattern":"[url:value = 'http://5.182.210.174/9c9b83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2db887a-4d31-0510-b5ab-00004f4bb1f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227:8080/bot.x86_64","pattern":"[url:value = 'http://94.154.43.227:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dadf802-f789-252f-59d9-000083f0257d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.239.124.108/atomic/main_x86_64","pattern":"[url:value = 'http://77.239.124.108/atomic/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ab05cc-cfac-5f15-9abe-000050b0a42c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pawsockenjoyer.site/z7/webhook","pattern":"[url:value = 'https://pawsockenjoyer.site/z7/webhook']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7353fbef-a657-1dae-45a2-000053e2ea78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc3.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc3.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a26f36-9229-efcb-a922-00000e2d69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/bin.sh","pattern":"[url:value = 'http://182.122.199.106:34085/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84675f50-f218-c4db-dcfd-0000763fdefa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/bin.sh","pattern":"[url:value = 'http://125.41.75.183:52478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1e652f9-d5c4-ba1f-3f81-00008f87758b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.190:54106/i","pattern":"[url:value = 'http://115.48.146.190:54106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adcccfa2-1031-7733-a4f9-0000f03a8917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/bin.sh","pattern":"[url:value = 'http://61.52.45.140:49405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f0701a-a5cc-1e56-d8f9-00007745e854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/i","pattern":"[url:value = 'http://182.122.199.106:34085/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7c7a30-754b-bc11-4704-00005c7e0caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.187:46359/i","pattern":"[url:value = 'http://115.55.130.187:46359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4d5538-f7e9-bf9e-26f6-000011af6501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/i","pattern":"[url:value = 'http://125.41.75.183:52478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bbba2a-36ea-3b9b-ea15-00008335aa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/bin.sh","pattern":"[url:value = 'http://125.47.87.135:56962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513ac95f-eefe-720d-0269-00004fa299c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/i","pattern":"[url:value = 'http://61.52.45.140:49405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b460b97f-401c-9dfe-e70e-0000d36e1ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.145.166:55070/i","pattern":"[url:value = 'http://39.74.145.166:55070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f326b9b-63fe-4c60-6e00-00004beef13c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/i","pattern":"[url:value = 'http://27.202.245.161:52186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75eb78f-ac77-7f01-addf-000039485d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/i","pattern":"[url:value = 'http://196.190.105.170:51134/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c4db08-796c-2b8f-90fe-000004a00ee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/i","pattern":"[url:value = 'http://125.47.87.135:56962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3011443d-3852-ffb3-86b6-0000266099ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/bin.sh","pattern":"[url:value = 'http://60.18.84.125:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205939c0-b2a1-943d-b4a6-000079eab724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/i","pattern":"[url:value = 'http://61.163.131.68:44551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d67ed39d-2644-5ec2-1a3b-00001c15a43c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5802330c-6d21-bad1-194d-0000e709b88e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e3f11-1f4f-6738-cf1b-000056f48bd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2999be22-9d2a-722c-22a4-00003c2a7fdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/bin.sh","pattern":"[url:value = 'http://222.127.53.189:47969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--422bfd00-add9-c8a4-762f-0000f9d8235c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1787387436870.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1787387436870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafed242-d7ff-74df-d9cd-00006e63645c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.75.158:39827/i","pattern":"[url:value = 'http://123.173.75.158:39827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9709d526-e81b-ba01-5df1-00004d25f695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/bin.sh","pattern":"[url:value = 'http://222.137.147.215:41949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4241acdf-c05c-750b-7941-000071cab502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/i","pattern":"[url:value = 'http://222.127.53.189:47969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e8a150-9864-f810-7763-000081078c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://practisingcertificateprotection.com/Installer_91473f.msi","pattern":"[url:value = 'https://practisingcertificateprotection.com/Installer_91473f.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c96ca5-49c2-d6e3-1ef1-0000003584e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlcc.zip","pattern":"[url:value = 'https://kee126.com/vlcc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b90eb3-bc88-2f64-ece5-00001f502307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827302ec-6092-c6f1-a83d-0000afb42eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.183.90:33830/i","pattern":"[url:value = 'http://123.14.183.90:33830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f5319f-1ce8-a2c8-4273-000009b3bb4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20fbae","pattern":"[url:value = 'http://5.182.210.174/20fbae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78efa237-8066-e789-3655-000079d69741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/374166","pattern":"[url:value = 'http://5.182.210.174/374166']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9094d3-e8be-b925-d092-00009e9b1221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9f0d8c","pattern":"[url:value = 'http://5.182.210.174/9f0d8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7658d761-4414-3930-b9f0-000016aa6ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/bin.sh","pattern":"[url:value = 'http://115.50.157.21:42304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88726f60-c35c-3bed-5518-0000e0cfe97e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4878f","pattern":"[url:value = 'http://5.182.210.174/c4878f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec1070b-f7ce-d17b-c9dd-00005b01ce30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1416b6","pattern":"[url:value = 'http://5.182.210.174/1416b6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db5cc07b-ea9a-a1f1-913c-000005f50855","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da703f","pattern":"[url:value = 'http://5.182.210.174/da703f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281153c5-8ba9-423c-75b6-000098343f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45d4ef","pattern":"[url:value = 'http://5.182.210.174/45d4ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d68a1fe-cf70-827e-e453-0000bf597fdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79d8a6","pattern":"[url:value = 'http://5.182.210.174/79d8a6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669c6c-34c0-980a-0960-0000cc9e760f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1f4418","pattern":"[url:value = 'http://5.182.210.174/1f4418']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4480d5e-c934-f264-1113-00005ffdf15f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9bf687","pattern":"[url:value = 'http://5.182.210.174/9bf687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e5b40b-b337-a3b6-66f1-0000a8ead72d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/40ab6b","pattern":"[url:value = 'http://5.182.210.174/40ab6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6079f87-a01e-0dfe-9a29-000078b14b6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f653ed","pattern":"[url:value = 'http://5.182.210.174/f653ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3ad684-86d9-abe2-4aa6-000003244dc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69e5eb","pattern":"[url:value = 'http://5.182.210.174/69e5eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94065ad8-143f-679e-04ca-0000dedb3159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/75fa66","pattern":"[url:value = 'http://5.182.210.174/75fa66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4adcdb-ee54-a116-3d30-0000ce2ebd9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3d5609","pattern":"[url:value = 'http://5.182.210.174/3d5609']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d519c0-0046-f95f-1efd-000008605cec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/abcfc3","pattern":"[url:value = 'http://5.182.210.174/abcfc3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e720570-316f-3c77-c7ec-000063fbc925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b69b69","pattern":"[url:value = 'http://5.182.210.174/b69b69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a901cd2-d2f6-358a-e926-00006c036a63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7252a4","pattern":"[url:value = 'http://5.182.210.174/7252a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee7f8a9-645a-c2b4-1cd6-0000c0d43f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/805ade","pattern":"[url:value = 'http://5.182.210.174/805ade']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a772c84-9fe2-c1cc-052d-0000e51a7949","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f3158a","pattern":"[url:value = 'http://5.182.210.174/f3158a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a386f47-a622-dd84-11cf-00004bc41157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20c791","pattern":"[url:value = 'http://5.182.210.174/20c791']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6f09e0-ef7a-79bf-1ff4-0000515b5244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67dfb1","pattern":"[url:value = 'http://5.182.210.174/67dfb1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68204b06-d5b4-9a64-6b24-0000d8188f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/140cef","pattern":"[url:value = 'http://5.182.210.174/140cef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44da711-9deb-5696-3007-000000b99b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/810904","pattern":"[url:value = 'http://5.182.210.174/810904']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec421a1e-b046-d813-9a73-0000ca31115f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e8090c","pattern":"[url:value = 'http://5.182.210.174/e8090c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e6befb-150a-b48e-88c5-00007ec81df5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06d0d9","pattern":"[url:value = 'http://5.182.210.174/06d0d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc68e169-807f-a158-7626-0000b77c9e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a84a56","pattern":"[url:value = 'http://5.182.210.174/a84a56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6576fa6-92dc-62bc-eb82-00003ee9d785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/766551","pattern":"[url:value = 'http://5.182.210.174/766551']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f954a7-102c-cdc9-a7cd-000032f7dc96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bd742d","pattern":"[url:value = 'http://5.182.210.174/bd742d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d96ec1cf-f46d-1f5a-7b1b-0000166e3e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ceeba2","pattern":"[url:value = 'http://5.182.210.174/ceeba2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdb87a9-c692-2969-4487-0000471c267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/233bc5","pattern":"[url:value = 'http://5.182.210.174/233bc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e13b3f-b449-add9-34ab-000030fedab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9ab2df","pattern":"[url:value = 'http://5.182.210.174/9ab2df']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d89eb3c-4e07-aff5-4d2b-0000f0e948a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5d1d11","pattern":"[url:value = 'http://5.182.210.174/5d1d11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5927f67-366e-285a-2414-00000f480fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2509eb","pattern":"[url:value = 'http://5.182.210.174/2509eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326f0910-7353-2aa1-de0b-0000e49f216c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d83d","pattern":"[url:value = 'http://5.182.210.174/c5d83d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0951997-1b1c-c665-b1f5-0000174f25c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07809e","pattern":"[url:value = 'http://5.182.210.174/07809e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a3ada9-1b39-0979-df8b-000076a913ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6da58f","pattern":"[url:value = 'http://5.182.210.174/6da58f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca60e55-8416-2a6e-69bd-00003f37823a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/564fd4","pattern":"[url:value = 'http://5.182.210.174/564fd4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ec58ec-75f0-7dec-e5a1-00008f5015ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/592521","pattern":"[url:value = 'http://5.182.210.174/592521']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b118e6-a299-0607-7730-00006764f278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/57965a","pattern":"[url:value = 'http://5.182.210.174/57965a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835749db-1c03-45ca-0917-0000a11eafe7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/41308f","pattern":"[url:value = 'http://5.182.210.174/41308f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acdc1fb6-e140-ea6a-188d-0000779a57c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7cf768","pattern":"[url:value = 'http://5.182.210.174/7cf768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44212633-8ed6-d9a5-c9f1-00005dec8d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b2904e","pattern":"[url:value = 'http://5.182.210.174/b2904e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c456ee45-6117-896e-091c-0000c0d220e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ea8c29","pattern":"[url:value = 'http://5.182.210.174/ea8c29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d28234-a1cb-3f8d-81ea-0000b67c41f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21dbf2","pattern":"[url:value = 'http://5.182.210.174/21dbf2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7000507f-d719-ae35-cc4a-0000116037e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5bf116","pattern":"[url:value = 'http://5.182.210.174/5bf116']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e37b85f-dbea-a0fc-5ea7-00000737ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/135481","pattern":"[url:value = 'http://5.182.210.174/135481']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13baf4d-2fe8-d25f-909c-000014a0128e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9cd6a1","pattern":"[url:value = 'http://5.182.210.174/9cd6a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f9836d-323e-abab-6ff2-000060b69c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8efbc","pattern":"[url:value = 'http://5.182.210.174/b8efbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--367a904d-f819-626a-4fda-00004da54933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1a0da","pattern":"[url:value = 'http://5.182.210.174/a1a0da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a96db6-0cc8-f67f-a9dc-00004afcc9a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/25a617","pattern":"[url:value = 'http://5.182.210.174/25a617']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13adc1d5-8292-086f-c85b-000005b28b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6c8dfb","pattern":"[url:value = 'http://5.182.210.174/6c8dfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8250f9-a11d-401b-d010-0000f76eb245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0ab716","pattern":"[url:value = 'http://5.182.210.174/0ab716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39687462-5a38-d705-f200-0000b71f0f41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2be985","pattern":"[url:value = 'http://5.182.210.174/2be985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d0015f-8534-ea72-b3b6-00000c5ecf57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/84d632","pattern":"[url:value = 'http://5.182.210.174/84d632']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23c5c3-c1ab-6f85-5855-000073753f45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4fcda","pattern":"[url:value = 'http://5.182.210.174/b4fcda']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4564aa0c-604d-f1df-4c4c-0000e35b4dad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b02922","pattern":"[url:value = 'http://5.182.210.174/b02922']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab1a288-fa0c-923d-311d-00003b0752fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f76130","pattern":"[url:value = 'http://5.182.210.174/f76130']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622812b4-d1f0-adff-33ac-00007b60cb29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4f3e29","pattern":"[url:value = 'http://5.182.210.174/4f3e29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adca97b3-e7b1-32a9-0afb-000076df3239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b67bf0","pattern":"[url:value = 'http://5.182.210.174/b67bf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c6c5e6-4e25-6fa5-605d-00009d93ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/72ab73","pattern":"[url:value = 'http://5.182.210.174/72ab73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e89c3af4-5437-405c-fc6b-00009aab9f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/662744","pattern":"[url:value = 'http://5.182.210.174/662744']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797719c1-9171-c1fb-86b6-0000317af427","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f17409","pattern":"[url:value = 'http://5.182.210.174/f17409']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5eb0c-7959-fa30-7f12-00009086801a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21eb07","pattern":"[url:value = 'http://5.182.210.174/21eb07']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defb9db1-8e51-9d0f-98ae-0000de6a0e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a10960","pattern":"[url:value = 'http://5.182.210.174/a10960']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa64b86-fdc7-ca7e-07db-00003df6b230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dd08c4","pattern":"[url:value = 'http://5.182.210.174/dd08c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66b624-7154-ddfd-5072-0000dd7c66be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/520230","pattern":"[url:value = 'http://5.182.210.174/520230']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a95298b3-3c10-46b9-a666-00000f933584","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bf4fde","pattern":"[url:value = 'http://5.182.210.174/bf4fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--121d0c30-9a63-aa4f-c07e-00001fae83f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d70921","pattern":"[url:value = 'http://5.182.210.174/d70921']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1c05c3-04b9-79ba-0882-00000ee9c502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f9e3f4","pattern":"[url:value = 'http://5.182.210.174/f9e3f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0a5f00-9a15-32de-57ce-00002980ed90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d67e2e","pattern":"[url:value = 'http://5.182.210.174/d67e2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acc2112b-6819-42d7-4524-0000e6dd6c8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e41ded","pattern":"[url:value = 'http://5.182.210.174/e41ded']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f83bb8-4e9b-11d9-42bf-0000b0ef7f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kal64","pattern":"[url:value = 'http://194.59.30.63:56439/b/kal64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d60a54-ddfb-00f9-e900-00000a9c5c1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/linux","pattern":"[url:value = 'http://194.59.30.63:56439/b/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e6c556-1bfb-6a05-b531-000063a37399","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kswpad","pattern":"[url:value = 'http://194.59.30.63:56439/b/kswpad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8dcd19-1771-8016-8c69-00000adc8ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/amd64","pattern":"[url:value = 'http://194.59.30.63:56439/b/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f9d92-b895-f1f1-aa09-00005eb1c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.116.131:52454/bin.sh","pattern":"[url:value = 'http://113.239.116.131:52454/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4887b716-73a2-6379-e3f5-00003485b4d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.189.106:45073/i","pattern":"[url:value = 'http://112.248.189.106:45073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d031a72-4196-b4cc-0aa2-00008a2752cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/i","pattern":"[url:value = 'http://203.101.187.14:53741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873fa158-f03c-be30-868f-000097a39ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/bin.sh","pattern":"[url:value = 'http://42.177.182.116:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89e5662-c259-43f1-0661-000044731ed9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/bin.sh","pattern":"[url:value = 'http://193.163.187.73:41788/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1c3dfe-d9fb-46cc-f58a-000035c50f5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/bin.sh","pattern":"[url:value = 'http://42.228.221.46:33013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59009cb7-4df4-5f0b-5cdf-0000e9936874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/i","pattern":"[url:value = 'http://193.163.187.73:41788/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd2b8cc-1572-3bc2-72fb-00002802bd5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/bin.sh","pattern":"[url:value = 'http://113.239.64.220:36469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0449540a-df14-5b99-2c81-00002836a118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/bin.sh","pattern":"[url:value = 'http://61.163.131.68:44551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e67d7846-ad96-3542-fe93-000049334a45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/i","pattern":"[url:value = 'http://42.5.254.164:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a310a211-80e6-f5e3-8d15-000068144245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.245.39.127:54225/i","pattern":"[url:value = 'http://43.245.39.127:54225/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defbd05f-484c-6286-2f5c-000038c1c276","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/i","pattern":"[url:value = 'http://175.107.210.253:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b133e6-128a-855e-4271-000011140fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/i","pattern":"[url:value = 'http://223.108.82.26:33999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1c5a05-72f8-4271-81bb-0000a6e86e4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/bin.sh","pattern":"[url:value = 'http://223.108.82.26:33999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--206caeb4-0872-ebdb-81fd-000042a1af56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/bin.sh","pattern":"[url:value = 'http://42.231.79.131:52303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ed1af2-d203-b27b-6ed3-00002ca08617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/bin.sh","pattern":"[url:value = 'http://27.202.245.161:52186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428ec8d4-0dfb-8f0e-2b8a-000077d52b61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/bin.sh","pattern":"[url:value = 'http://203.101.187.14:53741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf36bcaa-670b-536d-004b-0000a753e98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/i","pattern":"[url:value = 'http://42.7.217.91:35797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52980d96-c1b8-407b-6b3a-00004692e485","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/bin.sh","pattern":"[url:value = 'http://196.190.105.170:51134/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53293a6d-ac87-b310-3736-0000d3625b9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/i","pattern":"[url:value = 'http://45.194.25.221:57073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abae2a79-0c5d-cb3f-24e3-0000f153541d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.35.84:54017/i","pattern":"[url:value = 'http://182.113.35.84:54017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--590591e9-c56e-9cdf-f74c-00004a75e10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/i","pattern":"[url:value = 'http://42.228.221.46:33013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f382e49e-e5af-fcbc-80c8-00003a5f0443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://181.79.85.69:11861/i","pattern":"[url:value = 'http://181.79.85.69:11861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80afcfc1-5b88-657b-0747-00006e10cca1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.83.137:53442/i","pattern":"[url:value = 'http://175.151.83.137:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c54898-403d-8604-74fb-0000d4d85f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/i","pattern":"[url:value = 'http://222.142.73.193:41053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856a874a-5cce-e53a-3eee-000050decbf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.83.137:53442/bin.sh","pattern":"[url:value = 'http://175.151.83.137:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75dea581-6734-85a8-e2f3-0000a69a8313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/bin.sh","pattern":"[url:value = 'http://222.142.73.193:41053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddeede8-402c-6084-0099-0000d93cb6f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.82.47:47055/i","pattern":"[url:value = 'http://123.14.82.47:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--599c963b-6177-5349-c2ef-000002eabd75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/i","pattern":"[url:value = 'http://163.142.92.235:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2cb1a0-9f87-7a45-848c-0000e208eb78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.255.43.126:35671/i","pattern":"[url:value = 'http://58.255.43.126:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b7efd8-8cbc-be84-35af-0000fb0fe8a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.34.181:57854/i","pattern":"[url:value = 'http://182.113.34.181:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee3f324-fbcb-d9bd-76ee-0000cda0aa00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/i","pattern":"[url:value = 'http://125.44.39.164:59869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afa8c50-55c9-c900-b56a-00005294a721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.201.118:34655/i","pattern":"[url:value = 'http://182.126.201.118:34655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37fddcf0-0442-efe7-e70b-0000af3332fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.246.199:52106/i","pattern":"[url:value = 'http://125.47.246.199:52106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3450facd-5d2f-ffe2-9304-0000e839184a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/i","pattern":"[url:value = 'http://87.68.238.27:33808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77160c23-f5cb-3226-a280-0000961c473d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/bin.sh","pattern":"[url:value = 'http://223.151.74.246:42753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64800c77-a383-292f-87f6-0000e4c5f733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/i","pattern":"[url:value = 'http://223.151.74.246:42753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7abe36-4e9e-434a-62ed-00001e06c784","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.18.142:43500/i","pattern":"[url:value = 'http://42.54.18.142:43500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a71e8dd-a202-9426-6fb9-0000c082dbe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.115.33.201:51030/i","pattern":"[url:value = 'http://119.115.33.201:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe42a165-7ead-d008-afb3-000095a4e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/bin.sh","pattern":"[url:value = 'http://60.162.38.51:34372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7db132e-7297-233a-e0e2-0000b64b646d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.59.14.119:49412/i","pattern":"[url:value = 'http://125.59.14.119:49412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5726c75d-6480-3556-6609-0000c6a43c6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.8.190:54830/i","pattern":"[url:value = 'http://42.5.8.190:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fd3a4b-b64e-0471-f2ca-00006e1c77c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/i","pattern":"[url:value = 'http://222.137.147.215:41949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692c3356-f46b-aee0-7ffe-00005af41e16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/i","pattern":"[url:value = 'http://125.43.20.178:46432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bf6185-40ae-7407-6261-000034b06858","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/i","pattern":"[url:value = 'http://174.105.154.212:55690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743cfeda-a7d1-1ca0-a7b5-0000d1384588","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.239.148.213:46343/i","pattern":"[url:value = 'http://121.239.148.213:46343/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46baa00-bd4f-744e-299e-00007afea9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/i","pattern":"[url:value = 'http://115.49.24.80:42107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91e61a0-a3e8-fff9-90dd-0000abe77fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.144.192:55986/i","pattern":"[url:value = 'http://124.94.144.192:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d806ea-c786-6a78-f508-00008e51edcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/bin.sh","pattern":"[url:value = 'http://223.105.50.190:35667/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab0b6c8-d5ea-a04a-123c-00001234386e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/i","pattern":"[url:value = 'http://223.105.50.190:35667/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95e3d89-d987-95f6-6539-0000fca95155","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/bin.sh","pattern":"[url:value = 'http://87.68.238.27:33808/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7900221-5c69-28e8-0c02-00000fc09868","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://47.129.178.214:8092/app_JnCFbH.webp","pattern":"[url:value = 'http://47.129.178.214:8092/app_JnCFbH.webp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e23de4-4ed2-a566-6ec0-00007e71f6c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/15c864","pattern":"[url:value = 'http://5.182.210.174/15c864']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e5894a-dc97-3b54-20cc-0000b35a784e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/30494a","pattern":"[url:value = 'http://5.182.210.174/30494a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4fc726-b1f9-39fd-fa87-0000aa6e626a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14e7a4","pattern":"[url:value = 'http://5.182.210.174/14e7a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833965cd-4881-65af-2a5c-00002a8e57d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e70ebc","pattern":"[url:value = 'http://5.182.210.174/e70ebc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4379ee0-91fd-17ee-f02b-00000aeb9731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/751d98","pattern":"[url:value = 'http://5.182.210.174/751d98']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62e7201-0d22-2678-82b7-0000346b39f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1cddd2","pattern":"[url:value = 'http://5.182.210.174/1cddd2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a17875d-1129-87fb-a9d7-00006703735c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0d9f5f","pattern":"[url:value = 'http://5.182.210.174/0d9f5f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de197f39-8f3e-d5a9-da8e-000013005696","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50b2c0","pattern":"[url:value = 'http://5.182.210.174/50b2c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f165faa-79b1-b84c-9f6f-0000e96e699d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06f787","pattern":"[url:value = 'http://5.182.210.174/06f787']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e11659c-cee9-d511-3f71-00007245bb14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e47e49","pattern":"[url:value = 'http://5.182.210.174/e47e49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4fce15-c098-ca0a-30f1-00005d8182c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c08b5a","pattern":"[url:value = 'http://5.182.210.174/c08b5a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65e9bd-43c8-e0d6-3e22-00008b94f580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/889136","pattern":"[url:value = 'http://5.182.210.174/889136']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e63c573-9d71-984e-b79e-0000c0f78000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/373541","pattern":"[url:value = 'http://5.182.210.174/373541']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91b300b-bfbc-cad8-3450-0000ad0055f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/449188","pattern":"[url:value = 'http://5.182.210.174/449188']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a63e3-a008-f5ac-ebf3-0000870bbba2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/074635","pattern":"[url:value = 'http://5.182.210.174/074635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b091518-66bc-f834-2dca-0000a82ae98d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7fbafd","pattern":"[url:value = 'http://5.182.210.174/7fbafd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d043bb19-85d6-12b7-7b1e-00000f65bad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f46a9e","pattern":"[url:value = 'http://5.182.210.174/f46a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6270bf-1dff-40fb-a51b-0000b6f7854d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/106fe5","pattern":"[url:value = 'http://5.182.210.174/106fe5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1deac-4afd-cb0b-0cc8-0000eca2dbf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ccdef","pattern":"[url:value = 'http://5.182.210.174/6ccdef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57b2405-2031-48bd-be2b-0000c482cee2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/119bdc","pattern":"[url:value = 'http://5.182.210.174/119bdc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b601561c-c766-680b-e980-00007aacd548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/455b2c","pattern":"[url:value = 'http://5.182.210.174/455b2c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66191923-d3bd-19d2-9cfc-00003116bca9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a923d","pattern":"[url:value = 'http://5.182.210.174/9a923d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e9e068-6611-3815-c4ff-0000351a7690","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e489b0","pattern":"[url:value = 'http://5.182.210.174/e489b0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a557d3-c8d7-746a-9df1-000028ff5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae2072","pattern":"[url:value = 'http://5.182.210.174/ae2072']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf63734-8984-ee84-8472-000013cdffc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/feb455","pattern":"[url:value = 'http://5.182.210.174/feb455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856b027a-12c0-7052-875e-0000454672ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/452bff","pattern":"[url:value = 'http://5.182.210.174/452bff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca73590-a15b-1d52-fe7d-0000e3e6094f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bea3b","pattern":"[url:value = 'http://5.182.210.174/8bea3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc4f70e-d86c-4417-2132-0000391c199c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8c04f2","pattern":"[url:value = 'http://5.182.210.174/8c04f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac3da84-cb98-82ff-5333-00006bf04817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0dfd70","pattern":"[url:value = 'http://5.182.210.174/0dfd70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d529406b-8f3f-38a2-9776-0000023fb6d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c915c0","pattern":"[url:value = 'http://5.182.210.174/c915c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd3bd5e-2d4a-99f2-f66e-0000dce51513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/330a6e","pattern":"[url:value = 'http://5.182.210.174/330a6e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b1e981-1df3-7bff-cb01-0000275bff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44973f","pattern":"[url:value = 'http://5.182.210.174/44973f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10b098f-2ea7-f16f-66d0-0000580f7b33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bb74f6","pattern":"[url:value = 'http://5.182.210.174/bb74f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17e831-676e-e556-c0fa-0000c4ab36d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14515c","pattern":"[url:value = 'http://5.182.210.174/14515c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb2670a-affc-dcf4-1d27-0000f632ef57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07c643","pattern":"[url:value = 'http://5.182.210.174/07c643']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90044347-3443-535c-53a2-00005d9a06a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8d34d4","pattern":"[url:value = 'http://5.182.210.174/8d34d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f820d6-a724-e3e1-c5ad-00005b905296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-03.cfd/dollar.exe","pattern":"[url:value = 'https://mon-blanc-03.cfd/dollar.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8f0e13-c3ad-3402-ff80-00000992eb05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/aa/Setup.rar","pattern":"[url:value = 'https://winds11.site/aa/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ab999a-eabe-ccb7-a019-0000e57533bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bulkdevices.com/blog/Chrome.exe","pattern":"[url:value = 'https://bulkdevices.com/blog/Chrome.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6f945d-0c88-cacd-1b4f-00005832cb90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/bin.sh","pattern":"[url:value = 'http://182.127.168.179:52810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64bff87-f454-3bca-e52d-000062262d67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/bin.sh","pattern":"[url:value = 'http://123.5.171.102:41517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c01e27-5912-d49f-4ef8-00008651e8fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.251.27:57017/i","pattern":"[url:value = 'http://182.113.251.27:57017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b95483-597c-ebe8-da08-00007b6f737f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.13.235.11:35751/i","pattern":"[url:value = 'http://221.13.235.11:35751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb1e674-ddd7-4fd7-225c-000013cc527c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/i","pattern":"[url:value = 'http://123.5.171.102:41517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44da670e-546e-e936-2dcb-0000b252ae4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1","pattern":"[url:value = 'http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a424ecd-7d75-4322-f951-00009b2902f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/bin.sh","pattern":"[url:value = 'http://61.53.123.190:47054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b47077-e714-63a5-f1cc-000046fb35ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043346.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043346.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8acb9b-20ce-dc4f-be4c-0000205376bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/MSI_PRO.png","pattern":"[url:value = 'https://deliverymailreport.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca5908a-cd33-2f43-4194-0000cf290609","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043509.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043509.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80688b95-4c61-b6dc-9c0d-000094b097df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003940.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003940.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b24f00-2b8b-0bc2-f24a-0000a6f8c4c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003735.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003735.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be20655f-1b61-59fa-bf0d-0000b07293b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043051.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043051.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0335ca-8074-dc43-6344-00005376c53e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/i","pattern":"[url:value = 'http://182.127.168.179:52810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5783a4-bce1-fd55-a87c-0000cfa6bfd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/i","pattern":"[url:value = 'http://61.53.123.190:47054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad32b88-ba2b-de9e-25a0-000072fa71eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/bin.sh","pattern":"[url:value = 'http://113.231.225.170:59950/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e7bc62-84ba-9edb-b7b9-0000c93bcc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.42.30.58:48392/i","pattern":"[url:value = 'http://125.42.30.58:48392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb190eb7-211a-be1b-627c-0000ce8f289e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/i","pattern":"[url:value = 'http://113.231.225.170:59950/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4efacf1-4234-c9a0-177b-0000727750f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.102.201:45262/bin.sh","pattern":"[url:value = 'http://42.177.102.201:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feaca9e6-ee9e-8ec4-ef07-0000f9bc0121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/img/stego_anepqnd5rj.png","pattern":"[url:value = 'https://coconutoficial.com.br/img/stego_anepqnd5rj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b16fa1-d4a8-bd9d-faf8-000072cf86aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/softbot.mips","pattern":"[url:value = 'http://91.92.47.97/softbot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8503f98-668f-f751-cb8a-000034c3d796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cba6a7d-d009-fd37-a2bd-00001cf9674e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_shot.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_shot.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08a2be6-b6f5-1b7d-33a9-000022047e2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_BB.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_BB.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c49b8-b919-a26e-b40d-0000e739c142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_rabit.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_rabit.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf5497a-9838-abb7-494b-0000417c5acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/x1.png","pattern":"[url:value = 'https://eccmice.com/dot/x1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2c1a29-a331-809d-d55a-0000411faee6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a1.png","pattern":"[url:value = 'https://eccmice.com/dot/a1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588c60f9-5031-a8b1-6761-0000cf90a905","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a2.png","pattern":"[url:value = 'https://eccmice.com/dot/a2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682afefc-9846-0052-caf6-0000192cca97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/nd7.png","pattern":"[url:value = 'https://eccmice.com/dot/nd7.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175d6f49-788b-d270-d7b9-00007c82a9d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mb.png","pattern":"[url:value = 'https://eccmice.com/dot/mb.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef342c64-d552-c9d9-d735-0000a32db9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mk4.png","pattern":"[url:value = 'https://eccmice.com/dot/mk4.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7aa8fc-8040-9654-8ce7-00009ea66137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/n1.png","pattern":"[url:value = 'https://eccmice.com/dot/n1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8837563-fdaf-a8cf-11ac-0000981e6f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://munihuacho.gob.pe/imagenes2/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/imagenes2/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2abf54-9333-f799-f1f4-00002725b8ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.252.216.68:38543/i","pattern":"[url:value = 'http://180.252.216.68:38543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e0b01e-4477-93cf-9429-0000a60187c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/bin.sh","pattern":"[url:value = 'http://175.146.117.140:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3c1e3-675c-a196-54c5-0000a9876e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/bin.sh","pattern":"[url:value = 'http://123.11.180.8:45505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbfcebfb-67d9-4a19-5577-000044664d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.85.188:32874/i","pattern":"[url:value = 'http://175.165.85.188:32874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7856fe70-b0df-3a8a-5887-0000a8b01574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10819ff1-5e6b-d96f-faef-00002c16793a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.34/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ad4be4-4be8-acb8-aac2-0000e1777468","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e29973-28d2-ce23-b34b-00004c4621c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f29821-4bca-ef63-8985-000027d2fa6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.41/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6fa811-bfce-6bc1-75e7-00005241c64b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.208:50797/i","pattern":"[url:value = 'http://222.140.183.208:50797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8a3d10-9daf-3a08-36c2-00008fd5c4f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.38/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a890cd7-ea2c-5081-35ab-0000446112a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a18ec4-5bde-7e1a-d08a-000066015d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.111/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b6fae7b-2a96-3047-3693-0000415b2fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aec9e0b-b2c3-3ad7-d0bc-0000be5da3c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.24.21.177:55825/i","pattern":"[url:value = 'http://36.24.21.177:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b85e9e-0fd9-223b-2b98-0000e2799bf2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/i","pattern":"[url:value = 'http://123.11.180.8:45505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5dcee-ec3f-d50f-b953-0000aae7246b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.240/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b00ad1-5ae3-3fa8-0c1b-000049b341ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83464df-a161-7d9a-704d-000052866d4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106794d5-9341-0600-2cdf-0000b9cf0980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm6","pattern":"[url:value = 'http://176.65.139.139/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb118ff3-1919-5ce9-2406-0000955f2caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.178.111:42241/i","pattern":"[url:value = 'http://182.127.178.111:42241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fcc6ae8-784e-2a6d-bc85-00005e47c98f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86_64","pattern":"[url:value = 'http://176.65.139.139/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff348a29-03b6-2f3f-2ab9-00002332bc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/m68k","pattern":"[url:value = 'http://176.65.139.139/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a8c711-04be-db24-4200-0000b524e6c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/spc","pattern":"[url:value = 'http://176.65.139.139/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575c4886-66cd-6431-f57f-00004bb3fa19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86","pattern":"[url:value = 'http://176.65.139.139/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fbc9b1f-a230-3934-64b4-0000b36e0d9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/sh4","pattern":"[url:value = 'http://176.65.139.139/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6760a443-ad8d-1868-75fa-000001736ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm7","pattern":"[url:value = 'http://176.65.139.139/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57fe8281-2ae9-cefb-9daf-00004731119c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/persist.arm7","pattern":"[url:value = 'http://176.65.139.139/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b318beff-2163-5730-e9c0-000023c46a90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mips","pattern":"[url:value = 'http://176.65.139.139/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ca7836-7b2d-587a-aa3b-000048c704da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mpsl","pattern":"[url:value = 'http://176.65.139.139/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aee7948-6d43-1f40-b05e-000033b0946c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/ppc","pattern":"[url:value = 'http://176.65.139.139/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--658c3037-3e30-99ef-5936-0000ee1a4f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/i686","pattern":"[url:value = 'http://176.65.139.139/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20db185d-f6b8-cb79-499e-000003086b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/i","pattern":"[url:value = 'http://175.146.117.140:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35026b4b-aab4-870c-5106-0000e0bef4fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.77.45:59612/i","pattern":"[url:value = 'http://182.117.77.45:59612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef59a81b-f667-3520-43ea-0000906cd661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/i","pattern":"[url:value = 'http://219.155.81.115:40911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bf79e53-dde8-243c-51ba-000056971507","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/i","pattern":"[url:value = 'http://27.213.115.26:45049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b287f2d6-95af-f224-a605-000028249922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/i","pattern":"[url:value = 'http://61.52.62.249:60152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8066bec-1728-bd67-ef87-00003be47bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/i","pattern":"[url:value = 'http://182.113.40.115:55056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91afe0ef-9263-e546-e7f2-00004edf9f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/bin.sh","pattern":"[url:value = 'http://174.105.154.212:55690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d92d717-298a-e5bf-9a10-00003d6751e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/i","pattern":"[url:value = 'http://42.239.76.28:33921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19a555f-8e0d-9916-d558-00004480ff99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.68.198:56133/i","pattern":"[url:value = 'http://113.230.68.198:56133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679cac18-398c-f6f1-2b5b-00001d489b8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/bin.sh","pattern":"[url:value = 'http://42.231.184.120:39468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb4a835-f286-13ec-e209-00007c04234e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/bin.sh","pattern":"[url:value = 'http://36.70.235.87:40268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac4b680-2bd8-c2b1-2567-00003bd55143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/i","pattern":"[url:value = 'http://42.231.184.120:39468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30172bdf-0d4b-9a2e-b4d2-000087004f3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/bin.sh","pattern":"[url:value = 'http://112.248.105.21:52064/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e139e2cf-8a1f-1bcc-aade-00005dc88d54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/bin.sh","pattern":"[url:value = 'http://42.226.211.193:43686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b751c9-d50a-1a71-d8da-00009cada25d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/bin.sh","pattern":"[url:value = 'http://42.59.235.202:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39db7bd-4596-9789-d3c7-00001ccaffd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.234.164:44742/bin.sh","pattern":"[url:value = 'http://42.59.234.164:44742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78154df2-f159-c97b-46d9-00006a3c37cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/i","pattern":"[url:value = 'http://112.248.105.21:52064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aec8be9-ee30-a6ab-368d-0000238e4148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.135:58810/i","pattern":"[url:value = 'http://115.48.144.135:58810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d08983-89e8-2e59-96c0-00007b971103","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/i","pattern":"[url:value = 'http://42.226.211.193:43686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e257f1-9057-d788-79b3-0000fb8e14ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/bin.sh","pattern":"[url:value = 'http://61.137.206.166:45619/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80dceb15-ffdb-d042-16d2-0000dc74906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.219.119.136:59026/i","pattern":"[url:value = 'http://27.219.119.136:59026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e180b2-404f-e387-4b11-0000de222510","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/bin.sh","pattern":"[url:value = 'http://115.50.82.162:60042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbceed64-9753-cb4c-769e-00002ca444bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/bin.sh","pattern":"[url:value = 'http://221.15.214.165:40665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f12a42f-c694-e025-4abd-0000feb54c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/bin.sh","pattern":"[url:value = 'http://182.116.21.39:52171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89fde310-33e6-5669-6cd8-00005e0fc8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/i","pattern":"[url:value = 'http://115.50.82.162:60042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c9836b-42e3-ab80-9a04-000042e2d076","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/i","pattern":"[url:value = 'http://182.116.21.39:52171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e147108-a2d4-8953-5f1d-0000d69b8892","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.232.254.209:49853/i","pattern":"[url:value = 'http://113.232.254.209:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81411f01-d20f-cff9-2f20-000039355080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/bin.sh","pattern":"[url:value = 'http://123.11.14.253:33653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceac35c9-ddd1-99cc-d2c3-00001759c5da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.161.237:35487/i","pattern":"[url:value = 'http://115.55.161.237:35487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6e6cd8-4f2b-06cc-364c-000014ae4969","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.235.135:48342/i","pattern":"[url:value = 'http://222.138.235.135:48342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8ae20b-b241-6639-4358-000099065150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/bin.sh","pattern":"[url:value = 'http://115.52.242.168:48270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd9ea6ce-4eac-aca9-8c1a-000080ad5b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/bin.sh","pattern":"[url:value = 'http://182.123.210.95:52102/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef675fb0-98d8-aa1d-bf7f-0000dfdd0e31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/i","pattern":"[url:value = 'http://123.11.14.253:33653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886f245e-5d27-d122-5b44-0000beb1dbf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.243.95.50:59704/i","pattern":"[url:value = 'http://222.243.95.50:59704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad95afd-18d6-d5c2-e556-0000f6317ad9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/i","pattern":"[url:value = 'http://222.140.183.70:34777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c92a64e-20b4-c398-9393-0000682e0c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/bin.sh","pattern":"[url:value = 'http://66.212.173.225:52589/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2b54e0-6687-57b3-8c01-00002ffff461","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/bin.sh","pattern":"[url:value = 'http://115.48.149.175:36753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558aada6-6871-95fe-f305-00003f47ccb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/i","pattern":"[url:value = 'http://182.123.210.95:52102/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f760093-7f22-dc5d-9265-0000b2459761","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.64.135.181:55489/i","pattern":"[url:value = 'http://217.64.135.181:55489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c15ce1d-9225-f0e0-0ec3-0000d82c6bfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.3.74:35880/i","pattern":"[url:value = 'http://182.113.3.74:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979aae84-5297-1b0c-cd14-000032141d58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/bin.sh","pattern":"[url:value = 'http://182.117.86.246:45059/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4ab492-11eb-e1ce-d3f6-00001c41ea4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/i","pattern":"[url:value = 'http://182.117.86.246:45059/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9dcc82-c9ae-930c-8faa-0000ff36fd57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/bin.sh","pattern":"[url:value = 'http://42.235.82.252:57371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bddb2b11-3fcf-c626-73a3-00008ee37a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/i","pattern":"[url:value = 'http://66.212.173.225:52589/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c849a545-097e-8eb4-cffc-00005e57bbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/bin.sh","pattern":"[url:value = 'http://175.165.142.110:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0285a178-f8e8-fde5-5fd9-0000845a8643","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/i","pattern":"[url:value = 'http://115.48.149.175:36753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c0372f-2d43-caca-1b8f-0000cc04265f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/i","pattern":"[url:value = 'http://115.52.242.168:48270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b9cab4-c900-05b4-e747-0000b589274d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/i","pattern":"[url:value = 'http://61.53.75.99:58786/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c4f819-cedc-db41-dd45-0000a7edb075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.179.142:50106/i","pattern":"[url:value = 'http://42.232.179.142:50106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d31d7c-d2ad-f629-4f08-0000492b3bef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/i","pattern":"[url:value = 'http://175.165.142.110:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49e5a95-690b-aaa3-6bbe-0000584d34dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/i","pattern":"[url:value = 'http://42.235.82.252:57371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec5af8d-767e-8aa5-5463-0000df0a5bea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/bin.sh","pattern":"[url:value = 'http://61.52.62.249:60152/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce23c9c-c87e-7abe-94fc-00003d88fe8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.120.1.2:48934/i","pattern":"[url:value = 'http://182.120.1.2:48934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c26f40-e6a1-645b-5399-000013e31ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/bin.sh","pattern":"[url:value = 'http://182.117.0.179:35408/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e950b7-43d9-551c-2143-0000570aaa90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.182.112:48863/i","pattern":"[url:value = 'http://222.140.182.112:48863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd34384b-bcf4-5c40-758b-0000be926f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/bin.sh","pattern":"[url:value = 'http://61.137.198.130:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73b7abc-82b7-845c-b34e-00005ce93a75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/bin.sh","pattern":"[url:value = 'http://119.189.172.160:60627/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323486f6-1b4f-8345-61f9-000009528186","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/i","pattern":"[url:value = 'http://182.117.0.179:35408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9158c8c9-9bf8-dc21-047f-00000c9b6c70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/bin.sh","pattern":"[url:value = 'http://222.137.174.198:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea8e2a6-51e0-7a8f-731a-00009dc6de06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/bin.sh","pattern":"[url:value = 'http://45.194.25.221:57073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06211192-4c01-abc5-7e01-000015511a78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.67.25:54765/i","pattern":"[url:value = 'http://119.115.67.25:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fe272f-ad76-4953-17dc-000047a72994","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/i","pattern":"[url:value = 'http://119.189.172.160:60627/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--708b76cc-7f69-8055-8c57-00006fccae22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/bin.sh","pattern":"[url:value = 'http://42.85.209.65:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46333829-c93f-6e41-7309-00006ba5e56a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/bin.sh","pattern":"[url:value = 'http://125.43.20.178:46432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--005811fc-7db8-b88d-cc6f-00007ec135cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/i","pattern":"[url:value = 'http://222.137.174.198:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01a33ccb-d9f8-4e5a-3ae0-000055a0b7a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/i","pattern":"[url:value = 'http://42.85.209.65:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e330b79-7285-5469-5e07-0000f372aef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/bin.sh","pattern":"[url:value = 'http://61.53.205.255:56935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8238ced2-5ba1-c274-5096-00000700e62c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/bin.sh","pattern":"[url:value = 'http://27.213.115.26:45049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07abee6-4204-e8d9-1a4d-0000938ff268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/i","pattern":"[url:value = 'http://61.53.205.255:56935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91a52a-35f0-f8a3-87da-000095d46d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/bin.sh","pattern":"[url:value = 'http://115.58.88.2:47310/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a4d2ad-acec-d652-8a5e-000047634b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/bin.sh","pattern":"[url:value = 'http://185.233.94.151:57893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3519fcf8-07e8-2d12-10f4-000093c36182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/i","pattern":"[url:value = 'http://185.233.94.151:57893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c57f112-875d-fa04-bc87-0000137c2647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/i","pattern":"[url:value = 'http://115.58.88.2:47310/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaea3e-3e70-5a30-d1ae-0000237a8d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/bin.sh","pattern":"[url:value = 'http://116.138.47.10:38730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fe0ab1-cfb5-b2e3-275b-00009000e60c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.68.249.16:45432/bin.sh","pattern":"[url:value = 'http://83.68.249.16:45432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeb2fc1a-acab-34e6-0193-000078a11fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/bin.sh","pattern":"[url:value = 'http://125.43.246.89:58052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14666f7f-86dd-d967-1eae-0000ed6fd9d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/bin.sh","pattern":"[url:value = 'http://182.117.79.50:50740/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59056232-4564-205a-e7fd-0000f43889a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/i","pattern":"[url:value = 'http://115.51.35.175:41863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e6e804-dca1-37af-6553-00002cb1d308","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/i","pattern":"[url:value = 'http://61.243.238.134:46379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34692ed9-8fbc-e96f-4e37-000049479bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/i","pattern":"[url:value = 'http://125.43.246.89:58052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5753ca00-5858-488e-6112-000037017a73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/i","pattern":"[url:value = 'http://182.117.79.50:50740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92cf9b73-8d83-4335-495b-00003baf1fc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.121:52162/bin.sh","pattern":"[url:value = 'http://125.40.3.121:52162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b276c5da-0920-9a02-2ac3-00007b8302f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.3.121:52162/i","pattern":"[url:value = 'http://125.40.3.121:52162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1d0200-11f2-3b70-e502-0000a5464b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/bin.sh","pattern":"[url:value = 'http://182.116.23.190:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fcafb2-3f11-20fe-ae38-0000af387147","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/i","pattern":"[url:value = 'http://175.175.210.205:34753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bde355-f2aa-e92b-0d5a-00005e82c6af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/bin.sh","pattern":"[url:value = 'http://101.29.22.214:59328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fc6841-3fbb-e90a-9e64-00009c01fd82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/i","pattern":"[url:value = 'http://182.116.23.190:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5889bc80-bd36-6f4c-fbe2-0000c9578446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.247.47:34358/i","pattern":"[url:value = 'http://115.55.247.47:34358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c76d5d74-b768-a4ce-769f-00009b98bb19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/bin.sh","pattern":"[url:value = 'http://123.11.10.210:60891/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d762127-7e66-d927-3bb0-0000fc8dd41c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/i","pattern":"[url:value = 'http://123.11.10.210:60891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb392c7-618e-03ca-a9c4-00007189cf9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/i","pattern":"[url:value = 'http://101.29.22.214:59328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079dbc3-6003-d679-4031-00002c8ab8bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/bin.sh","pattern":"[url:value = 'http://61.53.75.99:58786/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec7e1ab-c08f-8dd1-1041-0000633e625f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/bin.sh","pattern":"[url:value = 'http://113.239.223.142:55389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3794bfa-7baa-3d54-6f64-00007671ec3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/bin.sh","pattern":"[url:value = 'http://221.15.22.1:46570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daeb5cac-ff73-d480-afa1-000005c2c8d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/i","pattern":"[url:value = 'http://116.138.47.10:38730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71253e4b-bff6-de35-cbb8-00008278e8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/i","pattern":"[url:value = 'http://175.150.176.248:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2acc9a02-8769-a46e-fee9-0000ee8e7de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/bin.sh","pattern":"[url:value = 'http://123.12.234.38:40280/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e436f9-a7ad-a645-7eef-00006018ba4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/i","pattern":"[url:value = 'http://113.239.223.142:55389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd5d43a-6b80-56aa-c5f9-0000ce670334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/bin.sh","pattern":"[url:value = 'http://27.215.124.221:49908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6b6dd7-bd92-e72f-5f55-00007683cb2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/i","pattern":"[url:value = 'http://221.15.22.1:46570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95df042a-cbeb-f0ca-02cd-0000b3ac8c4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/bin.sh","pattern":"[url:value = 'http://125.41.228.121:39428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13ba32e-c946-4b06-9cde-0000f28428fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/i","pattern":"[url:value = 'http://123.4.233.107:35672/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c84565b-7db8-1e03-23a0-000092ab3968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/bin.sh","pattern":"[url:value = 'http://122.139.14.243:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010bd8d7-60a9-95d0-d264-0000a283f085","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/bin.sh","pattern":"[url:value = 'http://42.224.49.156:55210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b5da19-fa17-88bd-5527-0000275db777","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/i","pattern":"[url:value = 'http://125.41.228.121:39428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3212e7e-9918-ddc8-71c8-0000ed771935","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/bin.sh","pattern":"[url:value = 'http://61.54.190.223:33351/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3908670-1470-6884-8960-00003d518184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/bin.sh","pattern":"[url:value = 'http://182.112.242.199:48848/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a89409-0dcf-b8f6-8d09-000036871afd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.14.177.167:35854/bin.sh","pattern":"[url:value = 'http://123.14.177.167:35854/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b9c7d74-e61f-2559-de7a-0000c4a65d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.83.215:50416/i","pattern":"[url:value = 'http://61.53.83.215:50416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a76d3f-e687-fecb-2b23-000043a0c434","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/bin.sh","pattern":"[url:value = 'http://125.44.39.164:59869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8f753d-6f11-01af-41ff-0000f78a2091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/i","pattern":"[url:value = 'http://182.112.242.199:48848/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145a2e49-13b3-3f93-9096-00000b844233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/bin.sh","pattern":"[url:value = 'http://39.79.0.238:46471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70bed1d5-601d-b161-e37b-0000cbced8d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.23.122:60626/i","pattern":"[url:value = 'http://123.189.23.122:60626/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f274cc-f0cc-bdce-65f3-00007423053e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.106.88:54654/bin.sh","pattern":"[url:value = 'http://112.248.106.88:54654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28703a9c-85ce-6f6d-ad49-000075d3ab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/i","pattern":"[url:value = 'http://39.79.0.238:46471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b6bfbd7-f588-1da5-b469-00005198e6f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.121.137.156:38226/i","pattern":"[url:value = 'http://182.121.137.156:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa600c3-eaac-fced-099b-0000582a6b95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.106.88:54654/i","pattern":"[url:value = 'http://112.248.106.88:54654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2ea995-8ad1-64df-fd64-0000acbd3506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/bin.sh","pattern":"[url:value = 'http://220.177.11.228:55723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389edd39-b0b6-803c-5713-0000fced9e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/bin.sh","pattern":"[url:value = 'http://175.175.210.205:34753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37382a53-c6d6-907e-84a1-0000dde5a1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/i","pattern":"[url:value = 'http://27.215.124.221:49908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd29d8d-18f1-fab5-2b61-0000b1a98a2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.213.157:48371/i","pattern":"[url:value = 'http://120.84.213.157:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7602049a-c8a2-71e3-8d87-00008e90dcd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.20.151:35587/i","pattern":"[url:value = 'http://182.116.20.151:35587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8063a494-5c29-57e0-ecb7-000010bc1c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/i","pattern":"[url:value = 'http://42.224.49.156:55210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311bc945-2567-e3fc-246e-0000127aaf5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/bin.sh","pattern":"[url:value = 'http://218.13.149.41:47316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8753df-35ab-5f65-b4bf-000090e92f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/bin.sh","pattern":"[url:value = 'http://219.156.34.146:35324/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8086b90f-2bbc-52c4-3647-0000cef631f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/i","pattern":"[url:value = 'http://219.156.34.146:35324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6402797f-4f01-8cae-201d-0000bb28c934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.219.1.198:34396/i","pattern":"[url:value = 'http://83.219.1.198:34396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64bccf0-1d64-2523-2889-0000c7f336e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/bin.sh","pattern":"[url:value = 'http://112.237.148.180:50714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee47e48-e48d-44ef-8feb-00009c24eb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/bin.sh","pattern":"[url:value = 'http://42.224.70.52:48398/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3bf03f-d395-a0ac-a69a-00007ef6ef06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/i","pattern":"[url:value = 'http://112.237.148.180:50714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2f5ad5-8f7a-ed4d-ad1e-000094b13ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://216.196.170.32:4154/i","pattern":"[url:value = 'http://216.196.170.32:4154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3b6aef-9176-03ae-62a9-000078d1b8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/i","pattern":"[url:value = 'http://42.224.70.52:48398/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c864b8-bb4a-0ab9-f7a4-0000ab150e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/bin.sh","pattern":"[url:value = 'http://103.160.130.109:34175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a09945-ece3-1bd4-e1b9-0000f472982a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/i","pattern":"[url:value = 'http://218.13.149.41:47316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35da7771-7993-5ad1-275e-0000a73d9307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.151.43.183:45405/bin.sh","pattern":"[url:value = 'http://103.151.43.183:45405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776d8fc1-b266-08de-37bd-0000eb0320cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.15.184.239:49837/i","pattern":"[url:value = 'http://221.15.184.239:49837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23402f3f-63ff-907a-9277-0000bf819edd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.139.42.27:42240/bin.sh","pattern":"[url:value = 'http://222.139.42.27:42240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449cf2d4-d7e7-9705-5944-0000a1c58456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/bin.sh","pattern":"[url:value = 'http://101.109.237.184:36403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1450a591-fb48-9b53-3b5a-0000b0bc8e25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.188.94.210:49613/i","pattern":"[url:value = 'http://123.188.94.210:49613/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfb615-ee23-95f4-da1f-00004a68e21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/bin.sh","pattern":"[url:value = 'http://112.198.130.112:60062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4352a78-121c-134b-1de1-0000974c7499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/bin.sh","pattern":"[url:value = 'http://120.57.122.56:42186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b077e3e8-7684-1522-d8b6-0000e8b580b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/bin.sh","pattern":"[url:value = 'http://27.215.86.140:41217/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b091fe3-5b77-1241-5e30-0000eb549d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/i","pattern":"[url:value = 'http://115.55.151.152:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f03abce8-ef89-4093-38cb-0000ddfbfc40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/i","pattern":"[url:value = 'http://119.117.164.177:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7198a6a5-bb55-d53f-06ef-00002d4cda4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/i","pattern":"[url:value = 'http://115.55.55.56:36789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138e8b51-9d21-a852-44ce-00004b7fee9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.52.184.70:36515/i","pattern":"[url:value = 'http://61.52.184.70:36515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef92222-9d04-03ed-11f4-0000ac6cdb46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.9.18:35539/i","pattern":"[url:value = 'http://123.8.9.18:35539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27aad9ba-5409-8226-5b37-00005a460aef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.140.187.100:34139/i","pattern":"[url:value = 'http://116.140.187.100:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6fc150-00a2-92ff-4651-00009726f1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/i","pattern":"[url:value = 'http://125.40.24.46:51091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1ce441-ba1b-820d-cae5-0000ab3dc845","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/i","pattern":"[url:value = 'http://222.141.138.63:42485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b66af5-9a92-c009-9791-0000fa696112","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/bin.sh","pattern":"[url:value = 'http://125.44.38.130:50257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d7ef28-f821-dac6-4e42-00000379faa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.13.74.177:44056/i","pattern":"[url:value = 'http://123.13.74.177:44056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddf7e60-1768-03ee-a33e-00001b71155e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.108.84.109:50272/i","pattern":"[url:value = 'http://85.108.84.109:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8823294-87ef-7154-dded-0000e0aae307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/i","pattern":"[url:value = 'http://113.230.30.175:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ab8362-374e-fd68-4bf5-0000ee8feb9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.77.48.16:34314/i","pattern":"[url:value = 'http://39.77.48.16:34314/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--484ea9ea-9561-0496-3f30-0000bea27ba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/bin.sh","pattern":"[url:value = 'http://115.57.255.1:59779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505fbdd2-92d9-f383-7e23-0000d0c43830","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/i","pattern":"[url:value = 'http://182.244.41.109:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e62fc6-9283-d997-e993-00003a21d0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/bin.sh","pattern":"[url:value = 'http://113.230.30.175:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc1591e-9c5b-4838-6dcf-000065d4df64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/bin.sh","pattern":"[url:value = 'http://118.34.109.121:32776/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d84242e-a9cf-d605-4e2c-0000dd9888b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/bin.sh","pattern":"[url:value = 'http://66.8.135.142:58566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d898c5-86db-0e19-f21f-000052824ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/i","pattern":"[url:value = 'http://118.34.109.121:32776/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e31011-0209-bcfa-f85e-00009a532ddb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/bin.sh","pattern":"[url:value = 'http://175.150.176.248:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408efa2c-dd06-dc9c-572c-000021725d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/bin.sh","pattern":"[url:value = 'http://222.140.183.70:34777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eacaff-1385-c99f-6469-00003b244550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/bin.sh","pattern":"[url:value = 'http://115.51.35.175:41863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473caa01-9100-5879-f07f-00008e33073a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/bin.sh","pattern":"[url:value = 'http://163.142.92.235:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f7d77bc-d3dd-72e5-7fd4-000076f8a025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/bin.sh","pattern":"[url:value = 'http://182.113.40.115:55056/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d2b2d3-264b-b5d1-aa7e-0000c597b10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/i","pattern":"[url:value = 'http://27.215.86.140:41217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3588532f-a2e1-8426-c8a5-0000b59241c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.56.113.61:36360/i","pattern":"[url:value = 'http://115.56.113.61:36360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62598861-7711-6de3-94b8-00005c8e1fc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/bin.sh","pattern":"[url:value = 'http://123.4.233.107:35672/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d02579a-ec59-5c21-d618-00001f06d20a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/bin.sh","pattern":"[url:value = 'http://183.188.77.45:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad0d12f-b2e9-4dae-f2ae-0000d9976233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/bin.sh","pattern":"[url:value = 'http://115.49.24.80:42107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4391be-a5ee-aa14-f105-0000bc393d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.204.195.233:38896/bin.sh","pattern":"[url:value = 'http://27.204.195.233:38896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d6c6a0-cb8d-e9c3-f438-0000df1e1f03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/bin.sh","pattern":"[url:value = 'http://119.117.164.177:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab02cb7-67e4-a60e-f9c9-0000c6377583","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/i","pattern":"[url:value = 'http://182.112.6.161:53066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccbab57-4498-9f73-8409-0000dcc003fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/i","pattern":"[url:value = 'http://123.97.30.141:52890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7ee97-c7cc-8a66-7b23-000099d213e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.226.31.25:56290/i","pattern":"[url:value = 'http://114.226.31.25:56290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500c892d-244e-7803-5627-00002714ff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/bin.sh","pattern":"[url:value = 'http://125.40.24.46:51091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0116e044-4ed8-fa46-1818-0000294f260e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/i","pattern":"[url:value = 'http://114.227.224.253:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c91-f7b8-c836-36af-0000008eae78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://93.88.96.103:33908/i","pattern":"[url:value = 'http://93.88.96.103:33908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcfbdd5-8e31-db82-897c-00002584bdda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/bin.sh","pattern":"[url:value = 'http://115.98.147.69:48442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495d110-ab5e-5ddb-97e2-0000f01675ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.52.190.88:42242/i","pattern":"[url:value = 'http://115.52.190.88:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd72b6b-0712-b8fe-d5d7-0000de33db5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.55.170:47643/i","pattern":"[url:value = 'http://42.53.55.170:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f25702-6913-b633-e0d0-000051bbc9d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/bin.sh","pattern":"[url:value = 'http://219.155.81.115:40911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8375cda7-5ce0-7d4a-771c-0000767a2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/bin.sh","pattern":"[url:value = 'http://115.55.55.56:36789/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bff8e3-3959-dd99-7e82-0000d869ee67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/bin.sh","pattern":"[url:value = 'http://123.97.30.141:52890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff0ab2b-8245-5ff2-c17c-000030207b1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.49.244:41600/i","pattern":"[url:value = 'http://115.55.49.244:41600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a7cfbe-52f5-b680-53ec-00003f666b09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/bin.sh","pattern":"[url:value = 'http://61.243.238.134:46379/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e5b401-ec9c-c6a4-6405-0000a57d5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/i","pattern":"[url:value = 'http://103.160.130.109:34175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b815b096-e537-d8ec-6bda-000084f0cb07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/bin.sh","pattern":"[url:value = 'http://222.141.138.63:42485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd11b8-04f3-cc31-0dd7-0000d93206bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.57.66.51:42056/i","pattern":"[url:value = 'http://42.57.66.51:42056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92796a4d-0f74-bd2e-5b34-00003aff111a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.68.95.197:48234/i","pattern":"[url:value = 'http://103.68.95.197:48234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3173985-5505-fb06-0a23-00009edf945b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.100.62:51333/i","pattern":"[url:value = 'http://42.224.100.62:51333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f35d82b-24e3-bfd1-bc1d-0000df3c6704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/bin.sh","pattern":"[url:value = 'http://115.42.71.239:50213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5870d28c-99d8-1c0c-eecc-0000ff5271b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/i","pattern":"[url:value = 'http://115.57.255.1:59779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2507de9-0444-822e-1390-0000a3bff83c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/i","pattern":"[url:value = 'http://182.113.205.36:51969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90656265-188b-312e-b5ad-0000d079d007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/bin.sh","pattern":"[url:value = 'http://182.112.6.161:53066/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec2a6b55-f4ff-de6c-c58c-0000c3b3d2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/bin.sh","pattern":"[url:value = 'http://114.227.224.253:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6408c2e0-4d55-5fd1-89fd-0000aa83a894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/i","pattern":"[url:value = 'http://66.8.135.142:58566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ece206-49af-f883-0de1-0000350f0695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/bin.sh","pattern":"[url:value = 'http://42.239.76.28:33921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504243ad-8d64-bcb8-da46-00006650b7b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/bin.sh","pattern":"[url:value = 'http://222.136.52.188:32973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58ea61-2f63-de8e-1a30-00007c4226e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/bin.sh","pattern":"[url:value = 'http://113.229.190.135:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d247b64-5b55-be5f-e2a8-00004b606283","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/i","pattern":"[url:value = 'http://125.44.38.130:50257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a2861a-8f42-70a7-f667-0000b0c69eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/bin.sh","pattern":"[url:value = 'http://42.225.15.213:35530/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60314a07-ee9f-e5d4-b97d-0000aa71f4fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/bin.sh","pattern":"[url:value = 'http://182.113.205.36:51969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20f3568-6c5f-bd62-800e-0000803c00f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/i","pattern":"[url:value = 'http://115.42.71.239:50213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8eb155-5bbe-be70-67bd-000069df98c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.182:40164/i","pattern":"[url:value = 'http://27.44.145.182:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b594c8f4-6066-c1c9-1d60-0000b2fa940c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.223.148:58418/i","pattern":"[url:value = 'http://115.60.223.148:58418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5a5f88-ee1d-bf44-b978-0000adcdf61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/i","pattern":"[url:value = 'http://42.230.42.7:45769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddd74290-0a72-b4cb-db54-0000d39d9773","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.6.248:33966/i","pattern":"[url:value = 'http://115.49.6.248:33966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4457ea56-d25b-fa29-f5c8-0000cdd9c8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/bin.sh","pattern":"[url:value = 'http://42.230.42.7:45769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a353941-206e-c756-cf7e-0000dd19ebda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.47.32.24:44968/i","pattern":"[url:value = 'http://125.47.32.24:44968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78404942-ff17-ce54-07a3-0000d00fa9a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/bin.sh","pattern":"[url:value = 'http://115.55.151.152:49757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f787757-620a-22c0-b20a-0000a3256bdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.165:53887/i","pattern":"[url:value = 'http://120.84.215.165:53887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e900c-9a83-d40c-a0b8-00006b951bd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.234.246.166:55376/i","pattern":"[url:value = 'http://124.234.246.166:55376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd505ab-4613-f896-ae25-0000aa9525ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.1.142:60668/i","pattern":"[url:value = 'http://125.41.1.142:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1e378aa-4672-65ad-253a-0000fe7cdde5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/i","pattern":"[url:value = 'http://115.98.147.69:48442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0473867-5e44-b217-acca-000046c9f013","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/i","pattern":"[url:value = 'http://182.241.136.218:42856/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d26638-54df-2581-545e-000085748e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/bin.sh","pattern":"[url:value = 'http://196.189.3.1:47844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf61f2e-65f5-e66c-0010-00005f21778f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/bin.sh","pattern":"[url:value = 'http://182.241.136.218:42856/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edeec56c-2f3b-42db-1cad-000044849b73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.224.238:59568/i","pattern":"[url:value = 'http://175.151.224.238:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51a5b19-b31a-761d-02c1-000043aca051","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/i","pattern":"[url:value = 'http://196.189.3.1:47844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--635ed0dc-6efd-fc1f-b27f-00007d0e3075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/i","pattern":"[url:value = 'http://120.57.122.56:42186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd578ab-6ec4-f719-c181-000030042296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/i","pattern":"[url:value = 'http://112.198.130.112:60062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fab88c1-3e09-d378-7fbc-0000d645d175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.118.161:54312/bin.sh","pattern":"[url:value = 'http://182.126.118.161:54312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91c3657-a5fa-1a80-3e6d-00000098b008","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.0.60.188:40182/i","pattern":"[url:value = 'http://175.0.60.188:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90f2cd6-63c4-8487-25d1-0000d4fc7aaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/i","pattern":"[url:value = 'http://101.109.237.184:36403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a61f6e-4192-133e-e033-000044d0abe0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/bin.sh","pattern":"[url:value = 'http://125.45.57.136:34620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4caaf9ae-a341-28f8-f121-0000d4ed258a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/i","pattern":"[url:value = 'http://123.12.234.38:40280/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e17734c-48b8-96d1-1497-00000a379ea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.230.168.62:51199/i","pattern":"[url:value = 'http://77.230.168.62:51199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f647439-1b49-6609-c061-0000de40823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.54.95.49:35344/bin.sh","pattern":"[url:value = 'http://24.54.95.49:35344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aabdf22c-ee8a-b3a3-c81f-0000567bb68e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/i","pattern":"[url:value = 'http://125.45.57.136:34620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--171b06a0-b171-9411-c28f-0000f13176b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.83.154:45105/i","pattern":"[url:value = 'http://113.230.83.154:45105/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbe74d0-0dec-a134-d92b-00001e7552f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://59.96.139.68:54390/bin.sh","pattern":"[url:value = 'http://59.96.139.68:54390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d387ac08-fdd5-6b09-7e69-00008b0bf1a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/bin.sh","pattern":"[url:value = 'http://162.255.251.91:33299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8741220a-56dc-86e4-abec-00005f88f7d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/i","pattern":"[url:value = 'http://162.255.251.91:33299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46af6127-887d-8a40-c85e-000045931629","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 8.130.121.151","pattern":"[ipv4-addr:value = '8.130.121.151']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00b9a29-2d04-e4e8-0dba-0000f17f8697","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 138.68.108.72","pattern":"[ipv4-addr:value = '138.68.108.72']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf95b1f-e387-57ab-2fd0-00009400f936","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.45.236.27","pattern":"[ipv4-addr:value = '99.45.236.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc15af0-facc-b311-ae23-00003ae1f5bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.183.235","pattern":"[ipv4-addr:value = '99.249.183.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8d9c08-04a2-2c7c-2752-000094832ac7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.135.86","pattern":"[ipv4-addr:value = '99.249.135.86']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca77332-3799-1c9d-056d-0000819f5b7d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.112.236","pattern":"[ipv4-addr:value = '99.249.112.236']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5218c8-75b5-d8dc-2c92-0000b5ac8a6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.237.52.2","pattern":"[ipv4-addr:value = '99.237.52.2']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f5aa3f-3c85-9747-c477-0000cb3ed612","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.227.229.131","pattern":"[ipv4-addr:value = '99.227.229.131']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2b68fd-d4ec-a5cb-4203-00004798399c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.224.131.187","pattern":"[ipv4-addr:value = '99.224.131.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254e6828-dacc-019c-2bc2-0000bbd7d1a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.61","pattern":"[ipv4-addr:value = '99.114.206.61']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7009ede-c15f-9185-f181-0000adef02ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.57","pattern":"[ipv4-addr:value = '99.114.206.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4cd1282-9b4b-a9e5-d3f0-00005fef9c61","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.83.98","pattern":"[ipv4-addr:value = '98.97.83.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0a8a32-7c8b-10e9-c009-000045fe3368","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.97.151.71","pattern":"[ipv4-addr:value = '98.97.151.71']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26490dc1-a667-9a1b-cdc5-000009b30fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.151.104","pattern":"[ipv4-addr:value = '98.97.151.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6677ea48-0d1a-a41d-04db-0000dd9c1b31","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.93.167.141","pattern":"[ipv4-addr:value = '98.93.167.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ebe5aa-78a2-a02c-e28f-0000216b7252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.92.183.234","pattern":"[ipv4-addr:value = '98.92.183.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--facedf15-6b0c-c0e0-34cc-0000843a60b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.231.170","pattern":"[ipv4-addr:value = '98.91.231.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a8c93-1918-8e8a-29c6-00001b81c1b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.209.6","pattern":"[ipv4-addr:value = '98.91.209.6']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e7ddd2-f9b2-34d5-d681-0000ee8f8f3e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.86.173.85","pattern":"[ipv4-addr:value = '98.86.173.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46cbd134-0389-6074-67de-0000ef1de453","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.4.49","pattern":"[ipv4-addr:value = '98.80.4.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--803fbfab-d24c-dbfa-0c56-0000b3cef82d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.215.201","pattern":"[ipv4-addr:value = '98.80.215.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850b512e-d47e-0b91-9c52-0000b2885e68","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.43.29.1","pattern":"[ipv4-addr:value = '98.43.29.1']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67a2d89-eb69-61b7-06ec-00000a7d6a20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.22.145.68","pattern":"[ipv4-addr:value = '98.22.145.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9c6b7a-ef4e-a47d-4bb8-0000aa53771d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.202.140.14","pattern":"[ipv4-addr:value = '98.202.140.14']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f00a044-c4ce-f554-55c9-0000e720d5c4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.199.111.73","pattern":"[ipv4-addr:value = '98.199.111.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5e612b-bfe5-a078-2e8a-0000e926e3d4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.254","pattern":"[ipv4-addr:value = '98.190.61.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4c01d0-2ffa-314e-c7e1-000053dc3ae8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.247","pattern":"[ipv4-addr:value = '98.190.61.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30427305-3419-7258-6521-0000119857ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.180.242.243","pattern":"[ipv4-addr:value = '98.180.242.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a442a982-2afa-977b-bd0b-0000035cf6ea","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.32.237","pattern":"[ipv4-addr:value = '98.175.32.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cafd304-f0bd-ac09-9905-0000de5599e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.158.5","pattern":"[ipv4-addr:value = '98.175.158.5']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a809990-ad90-1f74-8a19-00005d711857","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.61.78","pattern":"[ipv4-addr:value = '98.174.61.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277e3e5c-03b1-2421-bf14-0000728c9ba0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.246","pattern":"[ipv4-addr:value = '98.174.39.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7113c2-fdf2-8b2b-2d1a-0000d891aa4e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.23","pattern":"[ipv4-addr:value = '98.174.39.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a8e80f-ccfc-b02b-10b5-00008caa2100","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.168.101.144","pattern":"[ipv4-addr:value = '98.168.101.144']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f603f10-16bf-b485-b037-00005947c321","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.118.135.235","pattern":"[ipv4-addr:value = '98.118.135.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41a7ef-772f-cf12-53e1-000034b7a604","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.111.211.243","pattern":"[ipv4-addr:value = '98.111.211.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe2fc09-76b1-dff6-8142-0000c02a39b1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.100.78.54","pattern":"[ipv4-addr:value = '98.100.78.54']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef97038-8c2f-1dc3-7112-0000e2795013","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.75.176.87","pattern":"[ipv4-addr:value = '97.75.176.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eea7b1e-9dc6-5025-ab34-0000b6755aac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.176.59","pattern":"[ipv4-addr:value = '97.211.176.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90226756-9bca-d97f-14d8-00009ad42d26","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.104.169","pattern":"[ipv4-addr:value = '97.211.104.169']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3c2bbd-e478-04fc-5620-0000583450a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.137.143.133","pattern":"[ipv4-addr:value = '97.137.143.133']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c58b29-0073-54d3-6a1e-00009bcf81ab","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.125.240.75","pattern":"[ipv4-addr:value = '97.125.240.75']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c98896-d6c5-b9b4-e200-0000619b536a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.62.71.3","pattern":"[ipv4-addr:value = '96.62.71.3']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d0e72d-3bcf-7b1e-1b06-0000bba7b8c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.52.164.34","pattern":"[ipv4-addr:value = '96.52.164.34']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--130c4513-63c6-a274-f7bf-0000c2ba54ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.27.48.216","pattern":"[ipv4-addr:value = '96.27.48.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a913c4-69ff-aa26-9d82-00008ecbf310","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 96.234.71.42","pattern":"[ipv4-addr:value = '96.234.71.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc4eb0-5f18-1aa2-2b6e-0000d04271de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.22.217.74","pattern":"[ipv4-addr:value = '96.22.217.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b0b14-a21b-1315-3d6a-00001c9ff2bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.97.203.206","pattern":"[ipv4-addr:value = '95.97.203.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1ab0b1-00c5-501e-701e-0000935c4542","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.252.87","pattern":"[ipv4-addr:value = '95.85.252.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68a750a-7803-d5bd-37fe-00007f63389e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.241.219","pattern":"[ipv4-addr:value = '95.85.241.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9495d4e-6ddd-8412-1202-0000dec305a6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.81.217.243","pattern":"[ipv4-addr:value = '95.81.217.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc55a55-c058-f822-e213-0000e991bf13","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.65.66.242","pattern":"[ipv4-addr:value = '95.65.66.242']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af67332f-62d4-c953-3714-0000082f4531","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.57.228.130","pattern":"[ipv4-addr:value = '95.57.228.130']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0d27-6529-831b-1d84-00000197dc99","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.49.27.206","pattern":"[ipv4-addr:value = '95.49.27.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b625f1ed-201f-db9f-3598-000084894a23","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.40.120.162","pattern":"[ipv4-addr:value = '95.40.120.162']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b8ff3a-37d3-0397-036f-0000ad480761","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.41.116","pattern":"[ipv4-addr:value = '95.27.41.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca38b431-3376-ad30-264f-0000afb20932","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.139.70","pattern":"[ipv4-addr:value = '95.27.139.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b38fece-258b-89b8-dac8-0000aa9fedce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.216.4.60","pattern":"[ipv4-addr:value = '95.216.4.60']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66323b41-4e2a-7884-1469-0000fd8a427f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.178.113.84","pattern":"[ipv4-addr:value = '95.178.113.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c7a022-12e8-8299-d7d7-0000d4872322","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.177.109.137","pattern":"[ipv4-addr:value = '95.177.109.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f852f326-b839-5b05-8f97-000042896bfd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.173.188.94","pattern":"[ipv4-addr:value = '95.173.188.94']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3672dd89-275e-1c07-ac1a-0000b7c00834","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.158.43.234","pattern":"[ipv4-addr:value = '95.158.43.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09b0bc7-58e7-a1c4-04ba-0000b68aebb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.153.108.140","pattern":"[ipv4-addr:value = '95.153.108.140']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91235b7-a1f2-aa3b-862e-000058d4b663","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.253","pattern":"[ipv4-addr:value = '95.142.134.253']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20014c59-634b-d183-93f4-0000b1f0788a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.175","pattern":"[ipv4-addr:value = '95.142.134.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e079fe1e-fe98-1535-5918-00002ba7b390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.43","pattern":"[ipv4-addr:value = '95.0.32.43']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3aa9ee0-c420-f8bd-4853-0000ec2a2d28","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.116","pattern":"[ipv4-addr:value = '95.0.32.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa3cf5a-ab98-7133-1b38-0000ee6c9371","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.115","pattern":"[ipv4-addr:value = '95.0.32.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca121f0-7d5a-403d-a7a7-0000fd36ce6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.171.24","pattern":"[ipv4-addr:value = '95.0.171.24']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e794f7b1-eca8-06d6-6059-00007be4acff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.96.179.223","pattern":"[ipv4-addr:value = '94.96.179.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a57e56-b9f6-d8ec-d715-0000febfd561","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.9.233.139","pattern":"[ipv4-addr:value = '94.9.233.139']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9917243-f793-ecf0-80b9-0000c0bc466a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.45","pattern":"[ipv4-addr:value = '94.78.89.45']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c2847f-edb6-bd95-9647-0000e791a7ef","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.26","pattern":"[ipv4-addr:value = '94.78.89.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa1214a-5293-9d6f-dbca-0000e31cdb5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.20","pattern":"[ipv4-addr:value = '94.78.89.20']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3c53bc-1676-ba7b-5e1e-00001ff148eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.76.14.233","pattern":"[ipv4-addr:value = '94.76.14.233']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f436ec-238b-a818-5424-00009892f9a0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.62.83.184","pattern":"[ipv4-addr:value = '94.62.83.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c838ea25-3c4d-8f9c-a6f2-00000dcfa094","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.50.241.41","pattern":"[ipv4-addr:value = '94.50.241.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c4663d-e956-f952-79ee-00006bdac93a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.26.130.173","pattern":"[ipv4-addr:value = '94.26.130.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697fefd0-d44c-4c05-5a66-0000146ee0a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.81.78","pattern":"[ipv4-addr:value = '94.249.81.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1c2b60-4d45-804c-7984-00006ca25fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.87","pattern":"[ipv4-addr:value = '94.249.49.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e0a20c-9145-21f8-fdf3-0000318e5905","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.70","pattern":"[ipv4-addr:value = '94.249.49.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0b8edf-f793-ece5-c05b-0000a943bad1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.247.62.199","pattern":"[ipv4-addr:value = '94.247.62.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--789f2ff4-b8ba-489e-7696-00007ee2d252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.236.138.235","pattern":"[ipv4-addr:value = '94.236.138.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d3f5e-d4a4-7fce-f10e-000037bd9287","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.187.177","pattern":"[ipv4-addr:value = '94.231.187.177']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0fcae3b-80e0-06cd-82ea-0000a83f0206","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.180.184","pattern":"[ipv4-addr:value = '94.231.180.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed2e2fa-e407-d91c-7f4d-000005b4d79c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.222","pattern":"[ipv4-addr:value = '94.23.188.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77dbb340-2a36-0815-a24c-000007f269c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.221","pattern":"[ipv4-addr:value = '94.23.188.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc83d6-38a1-f5ed-765f-0000063003f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.220","pattern":"[ipv4-addr:value = '94.23.188.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2927520-a3e5-b9df-8c1c-00001008d0ae","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.216","pattern":"[ipv4-addr:value = '94.23.188.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9c140c-caae-4223-ae00-0000138c04c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.214","pattern":"[ipv4-addr:value = '94.23.188.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f881af-0b04-1d1a-b8e6-000016c31245","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.213","pattern":"[ipv4-addr:value = '94.23.188.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ffb139-78ae-1626-eeca-000017017872","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.212","pattern":"[ipv4-addr:value = '94.23.188.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6e083-22f6-a107-ba44-00001547c62b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.211","pattern":"[ipv4-addr:value = '94.23.188.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3659f0-fd8e-b316-bda1-0000a3e8f0f6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.209","pattern":"[ipv4-addr:value = '94.23.188.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c316966-6c3b-52c4-cf2c-0000a22a9ac1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.208","pattern":"[ipv4-addr:value = '94.23.188.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db894461-5d04-af52-c617-0000a8b4b7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.206","pattern":"[ipv4-addr:value = '94.23.188.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3587254d-ab5f-45da-998c-0000ab3063a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.204","pattern":"[ipv4-addr:value = '94.23.188.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce48078-073f-e166-3ebd-0000afbd1f17","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.202","pattern":"[ipv4-addr:value = '94.23.188.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45edd1c2-3908-4a17-e510-0000adfba14e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.201","pattern":"[ipv4-addr:value = '94.23.188.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32eae154-569e-b2bb-7b85-0000ac39cb79","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.200","pattern":"[ipv4-addr:value = '94.23.188.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b25ce0-5fe1-7474-d620-00009940c5ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.199","pattern":"[ipv4-addr:value = '94.23.188.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb56c76-cb73-ba8f-8248-00009882af9b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.198","pattern":"[ipv4-addr:value = '94.23.188.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080d4171-7b38-b598-7da8-0000921c8291","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.196","pattern":"[ipv4-addr:value = '94.23.188.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e603205d-7289-872d-d2e5-0000919856ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.194","pattern":"[ipv4-addr:value = '94.23.188.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7867b5fe-0e10-cbfe-068b-000094d7407a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.193","pattern":"[ipv4-addr:value = '94.23.188.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377a66d-5c4f-5333-b4ad-00004a05336d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.48.249","pattern":"[ipv4-addr:value = '94.207.48.249']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cf4374-991f-8db6-ebe5-000001653f3a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.29.221","pattern":"[ipv4-addr:value = '94.207.29.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c21c68e-4531-a774-7f43-000072e47d4c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.206.148.23","pattern":"[ipv4-addr:value = '94.206.148.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8988a11f-1f6c-0779-3c06-0000c968a745","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.204.212.135","pattern":"[ipv4-addr:value = '94.204.212.135']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b84c58-5fd2-837d-004c-0000a8eb8a72","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.191.86.165","pattern":"[ipv4-addr:value = '94.191.86.165']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8566c1d8-424d-cfe5-dd56-000000618b7a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.254.26","pattern":"[ipv4-addr:value = '94.183.254.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9baa5595-ad89-c90b-2f80-0000b2d4f3a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.239.85","pattern":"[ipv4-addr:value = '94.183.239.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b44fc-5edb-bd0d-02bc-00006c5b495e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.183.157.246","pattern":"[ipv4-addr:value = '94.183.157.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500192de-248f-afb9-a7f0-0000a459f9d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.123.154","pattern":"[ipv4-addr:value = '94.168.123.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d61bb6e-59a3-08a8-b994-0000022ef261","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.122.154","pattern":"[ipv4-addr:value = '94.168.122.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619e4620-d529-0cea-c816-0000afd812b4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.114.250","pattern":"[ipv4-addr:value = '94.168.114.250']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777f20ae-0c8f-b074-647e-0000ae0975fd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.62.72","pattern":"[ipv4-addr:value = '94.158.62.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd752e71-31fe-3ce7-966f-00004f110b20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.61.229","pattern":"[ipv4-addr:value = '94.158.61.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bffdde7-3305-eee4-3151-00004cbef390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.60.200","pattern":"[ipv4-addr:value = '94.158.60.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930fadf0-ca8b-fd2d-1f4f-000019381eca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.158.58.127","pattern":"[ipv4-addr:value = '94.158.58.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6b3853-c9c4-5875-7c5c-00001c77084f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.58.120","pattern":"[ipv4-addr:value = '94.158.58.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a7b14e-1823-592d-c91c-0000777f851b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.156.37.223","pattern":"[ipv4-addr:value = '94.156.37.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d58da8-345d-b86d-afb6-000050343c84","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.137.229.234","pattern":"[ipv4-addr:value = '94.137.229.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a93d5d-b704-678d-66e9-0000f29e248c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.124.166.111","pattern":"[ipv4-addr:value = '94.124.166.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8910434-6916-f7fe-ad36-000019a46c52","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.122.35.32","pattern":"[ipv4-addr:value = '94.122.35.32']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575986f3-97b7-450b-64ef-00009ea9701f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.103.3.108","pattern":"[ipv4-addr:value = '94.103.3.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cb7e0d-e8f6-a204-209e-0000a7f02690","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.102.4.88","pattern":"[ipv4-addr:value = '94.102.4.88']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f3f58a-c13a-b6a1-bdbc-0000a958b38c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.88.156.13","pattern":"[ipv4-addr:value = '93.88.156.13']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cc2124-1579-bdf6-9d3b-00001862c619","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.67.3.46","pattern":"[ipv4-addr:value = '93.67.3.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05e1b2a2-dc64-7b04-ef04-00001cbdba07","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.184.149.179","pattern":"[ipv4-addr:value = '93.184.149.179']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b9a3c0-1eb9-7f17-4a84-000021c6f288","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.176.165.100","pattern":"[ipv4-addr:value = '93.176.165.100']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a20f0b5-67c7-4f53-a558-000081ec31ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.171.184.57","pattern":"[ipv4-addr:value = '93.171.184.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d34f2fb-0b37-a191-3157-00000118955f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.66.200","pattern":"[ipv4-addr:value = '93.170.66.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e739d730-9c12-2d9d-9f23-000062122590","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.117.8","pattern":"[ipv4-addr:value = '93.170.117.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca310bbf-7ab3-587b-1065-0000516c12e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.152.221.68","pattern":"[ipv4-addr:value = '93.152.221.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f09b072d-25cc-be00-b397-00001bad8cfa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.127.121.67","pattern":"[ipv4-addr:value = '93.127.121.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba57258-3d03-6e01-d1aa-0000698abfc4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.123.109.67","pattern":"[ipv4-addr:value = '93.123.109.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7f7a2a-6092-862e-00d3-00007a580a58","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.170.197","pattern":"[ipv4-addr:value = '93.118.170.197']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446e626f-a898-2efe-3810-0000e43a805f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.169.27","pattern":"[ipv4-addr:value = '93.118.169.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cecb56-b4a3-1909-e554-000045b48609","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.164.193","pattern":"[ipv4-addr:value = '93.118.164.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11deb64-332c-e4ac-ad6b-000093aac763","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.153.229","pattern":"[ipv4-addr:value = '93.118.153.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8d936f-75de-077e-22a1-00002e800b36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.150.98","pattern":"[ipv4-addr:value = '93.118.150.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9579a3f8-4873-0823-62aa-00003659bfb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.148.66","pattern":"[ipv4-addr:value = '93.118.148.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--572f46f1-970f-62fd-b821-000037fbd05b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.140.9","pattern":"[ipv4-addr:value = '93.118.140.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f10c05b-58b7-ba9a-1e68-000067c8ea12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.92","pattern":"[ipv4-addr:value = '93.118.139.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b19e260-8466-37c0-f70f-00008e1a20c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.170","pattern":"[ipv4-addr:value = '93.118.139.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab154b7c-440b-28b7-da4a-0000c767b6da","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.128.115","pattern":"[ipv4-addr:value = '93.118.128.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b350f0-b991-b791-003f-0000da3485d7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.111.10","pattern":"[ipv4-addr:value = '93.118.111.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce62320-78e0-97aa-3ac3-000092006a1b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.117.127.141","pattern":"[ipv4-addr:value = '93.117.127.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff9082a-9a84-bc46-0866-0000c45348ce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.99.187.41","pattern":"[ipv4-addr:value = '92.99.187.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5bd189-32e8-c615-bcd0-0000be763f36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.97.111.22","pattern":"[ipv4-addr:value = '92.97.111.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca9a6387-9908-22e9-a75f-0000059a47d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.63.204.159","pattern":"[ipv4-addr:value = '92.63.204.159']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba2fbf7f-0fa3-8004-0af2-0000569ac226","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.254","pattern":"[ipv4-addr:value = '92.62.78.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4594a27-0e28-c25a-12e4-0000e92f0d9f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.240","pattern":"[ipv4-addr:value = '92.62.78.240']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073d42f5-460f-8708-e12b-000054fa8154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.121.148","pattern":"[ipv4-addr:value = '92.62.121.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a51ea9-fb96-dd2d-17e7-00002029904b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.52.175.65","pattern":"[ipv4-addr:value = '92.52.175.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4854ab28-cc14-8c50-d939-0000b9ba2fb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.39.35","pattern":"[ipv4-addr:value = '92.38.39.35']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1321ce97-3b1d-acd2-f6fd-0000e73f5366","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.18.36","pattern":"[ipv4-addr:value = '92.38.18.36']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b966e07-9b2e-ca5e-9ec8-000040a85223","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.31.3.72","pattern":"[ipv4-addr:value = '92.31.3.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0baf9165-050e-cea7-073e-00003a6184b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.251.124.73","pattern":"[ipv4-addr:value = '92.251.124.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0c4b6b-5228-8925-5c83-0000c2e4c255","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.241.37.47","pattern":"[ipv4-addr:value = '92.241.37.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3524f9a0-5292-3173-e8cf-0000cf857058","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.240.107.161","pattern":"[ipv4-addr:value = '92.240.107.161']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14213a20-f616-d27a-d205-0000f66b5a1c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.222.92.92","pattern":"[ipv4-addr:value = '92.222.92.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01d307-5807-5680-f039-0000f5780985","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.99","pattern":"[ipv4-addr:value = '92.222.108.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b9fe00-998e-5456-bf38-0000ffe6248f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.97","pattern":"[ipv4-addr:value = '92.222.108.97']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbece96-f276-3047-8fb7-0000fe244eb8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.96","pattern":"[ipv4-addr:value = '92.222.108.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19935681-b48c-b0c2-026d-00000573f775","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.127","pattern":"[ipv4-addr:value = '92.222.108.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e946617-5541-5472-a5a9-000004b19d42","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.126","pattern":"[ipv4-addr:value = '92.222.108.126']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79d37ad-a397-db30-c737-000006f7231b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.125","pattern":"[ipv4-addr:value = '92.222.108.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f9a20e-591f-8c65-6c93-000003b8359e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.122","pattern":"[ipv4-addr:value = '92.222.108.122']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0f0f3b4-2bbd-5328-44b0-000001fe8bc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.121","pattern":"[ipv4-addr:value = '92.222.108.121']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f7c322-fb1a-6a36-911a-0000003ce1f0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.120","pattern":"[ipv4-addr:value = '92.222.108.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5062845-edc4-7612-6167-00001d587591","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.119","pattern":"[ipv4-addr:value = '92.222.108.119']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a20118d3-a8f2-4804-65cb-00001c9a1fa6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.118","pattern":"[ipv4-addr:value = '92.222.108.118']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32be0542-9cdb-7cdc-30f2-000017c6589b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.117","pattern":"[ipv4-addr:value = '92.222.108.117']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b935d4-1caf-59d1-7169-0000160432ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.116","pattern":"[ipv4-addr:value = '92.222.108.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb754f8-99e7-b901-0c0a-00001580e6c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.114","pattern":"[ipv4-addr:value = '92.222.108.114']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3c15b-c2dd-d7e5-69ca-000010cff047","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.113","pattern":"[ipv4-addr:value = '92.222.108.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d4f1cd-8f56-8b5a-a881-0000110d9a70","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.112","pattern":"[ipv4-addr:value = '92.222.108.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbdda077-6448-8b97-2ce8-0000134b2429","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.111","pattern":"[ipv4-addr:value = '92.222.108.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acda90e1-a738-ea9a-3cd7-000012894e1e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.110","pattern":"[ipv4-addr:value = '92.222.108.110']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1a2992-7f0f-c9fe-d6cc-0000a42678c3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.108","pattern":"[ipv4-addr:value = '92.222.108.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca20495-5281-672b-b9e1-0000aeb855c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.106","pattern":"[ipv4-addr:value = '92.222.108.106']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ab552f-53e5-546c-fcc6-0000acfeeb90","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.105","pattern":"[ipv4-addr:value = '92.222.108.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac65b9-dd39-616f-023c-0000ad3c81a7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.104","pattern":"[ipv4-addr:value = '92.222.108.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc8f01a-b369-f00b-66f5-0000a8739722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.103","pattern":"[ipv4-addr:value = '92.222.108.103']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d948c1c0-4d51-4725-c2f9-0000827a4f0d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.223","pattern":"[ipv4-addr:value = '92.222.104.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4ff156-cdb7-a9a1-f553-000083b8253a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.222","pattern":"[ipv4-addr:value = '92.222.104.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4041907a-1e22-9777-6f00-0000803cf154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.220","pattern":"[ipv4-addr:value = '92.222.104.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b07b1d-7fec-b27e-fe98-00009d586535","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.219","pattern":"[ipv4-addr:value = '92.222.104.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b74b8b-6455-913f-0269-00009c9a0f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.218","pattern":"[ipv4-addr:value = '92.222.104.218']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f508561a-3b8c-8dc4-41d7-000097c6483f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.217","pattern":"[ipv4-addr:value = '92.222.104.217']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820f668c-0c4c-8455-9a3a-000096042208","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.216","pattern":"[ipv4-addr:value = '92.222.104.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0107a0-61c0-1945-cf75-00009580f666","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.214","pattern":"[ipv4-addr:value = '92.222.104.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2659203-9294-1059-9fd3-000090cfe0e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.213","pattern":"[ipv4-addr:value = '92.222.104.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8562a295-4097-279c-bda0-0000910d8ad4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.212","pattern":"[ipv4-addr:value = '92.222.104.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6bf32f-0129-600e-6361-0000934b348d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.211","pattern":"[ipv4-addr:value = '92.222.104.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6cc3b9-e1f8-7568-3b20-000092895eba","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.210","pattern":"[ipv4-addr:value = '92.222.104.210']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bab4a5c-b8a0-7a9e-5014-000025e40250","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.209","pattern":"[ipv4-addr:value = '92.222.104.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac7aca-6c33-9e83-29e7-000024266867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.208","pattern":"[ipv4-addr:value = '92.222.104.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec13675b-f42b-ca60-ec36-00002f7a2f5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.207","pattern":"[ipv4-addr:value = '92.222.104.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1457cd-9686-6d7f-0a37-00002eb8456d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.206","pattern":"[ipv4-addr:value = '92.222.104.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--021d0677-6f35-2898-6a3a-00002cfefb34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.205","pattern":"[ipv4-addr:value = '92.222.104.205']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751a36e1-6b6b-6376-bdcb-00002d3c9103","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.204","pattern":"[ipv4-addr:value = '92.222.104.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7ea342-ec45-72c4-cc6d-000028738786","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.203","pattern":"[ipv4-addr:value = '92.222.104.203']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0570c26e-b64d-9279-a3fb-00002bf753e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.201","pattern":"[ipv4-addr:value = '92.222.104.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82f4f4c-e7a3-e5d4-ffb1-00001f4c370a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.199","pattern":"[ipv4-addr:value = '92.222.104.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af287fda-f98f-55fb-5ed3-00001e8e5d3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.198","pattern":"[ipv4-addr:value = '92.222.104.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489052dd-f738-8ed1-a856-000014107037","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.196","pattern":"[ipv4-addr:value = '92.222.104.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1990367-92a3-e07a-a414-00001656ce6e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.195","pattern":"[ipv4-addr:value = '92.222.104.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69e33f1-659b-317e-44fd-00001794a459","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.194","pattern":"[ipv4-addr:value = '92.222.104.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38faa652-f1e8-fc6d-af28-000012dbb2dc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.193","pattern":"[ipv4-addr:value = '92.222.104.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffd96c4-ddcc-451d-2a76-00001319d8eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.192","pattern":"[ipv4-addr:value = '92.222.104.192']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5450cfc0-b6db-a8a9-f74a-000065c2ef12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.69.107","pattern":"[ipv4-addr:value = '92.208.69.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5728a44-b4d5-2e0a-601e-00003c9b9660","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.26.16","pattern":"[ipv4-addr:value = '92.208.26.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ce940f-b7f6-611f-2a26-0000d5194971","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.206.133.127","pattern":"[ipv4-addr:value = '92.206.133.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3727915f-6eef-1437-ae49-00001fc86643","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.184.109.125","pattern":"[ipv4-addr:value = '92.184.109.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9633aa4a-9bdb-4332-4a63-00009976c867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.130.231.52","pattern":"[ipv4-addr:value = '92.130.231.52']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831e4884-8fbc-d868-4f92-0000820ba4de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.118.39.65","pattern":"[ipv4-addr:value = '92.118.39.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f40eca-0cbd-33a6-f95f-0000734ed41a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.118.112.176","pattern":"[ipv4-addr:value = '92.118.112.176']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2341ea5-2c9e-e440-898f-00008c9c34d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.93.60.178","pattern":"[ipv4-addr:value = '91.93.60.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d32f556-d2b1-b884-d986-000084d5025e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.68.200","pattern":"[ipv4-addr:value = '91.92.68.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5adf31a-f401-211a-3031-0000317a1ffd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.47.201","pattern":"[ipv4-addr:value = '91.92.47.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d651627e-870a-841a-3b10-0000b7e33170","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.47.187","pattern":"[ipv4-addr:value = '91.92.47.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6a9ae27-c32c-637e-7140-00004e48490e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.42.11","pattern":"[ipv4-addr:value = '91.92.42.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651bc543-94fb-fba8-04c9-000095b9fccf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.41.148","pattern":"[ipv4-addr:value = '91.92.41.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631c7a77-b8e6-8033-2312-0000754da722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.40.183","pattern":"[ipv4-addr:value = '91.92.40.183']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed06267a-40e3-8e57-b9f8-0000a23e4aaa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.241.57","pattern":"[ipv4-addr:value = '91.92.241.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfaa8dd-8845-6081-7ddd-00004978685f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.211.46","pattern":"[ipv4-addr:value = '91.92.211.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e219ca1d-6304-52f3-ef7b-0000213e1686","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.209.22","pattern":"[ipv4-addr:value = '91.92.209.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2b49bd-35a4-8244-2a7d-0000fb8861c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.133.195","pattern":"[ipv4-addr:value = '91.92.133.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26facfde-ff8d-a06e-ed66-0000b183a267","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.90.121.157","pattern":"[ipv4-addr:value = '91.90.121.157']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453a7b2d-b15a-f1b0-ded7-0000421e044c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.83.27.92","pattern":"[ipv4-addr:value = '91.83.27.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1cfa0f5-6bae-cf2d-5a61-00001afea4f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.80.74.137","pattern":"[ipv4-addr:value = '91.80.74.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82bb1fe1-1b5d-94dc-aead-00006f8efece","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.78.199.11","pattern":"[ipv4-addr:value = '91.78.199.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1bcf0-8a62-dbb1-a8b7-0000738876d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.63.142.221","pattern":"[ipv4-addr:value = '91.63.142.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8d50de-8211-705e-a7ca-0000d13316c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.55.119.175","pattern":"[ipv4-addr:value = '91.55.119.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8b8fae-a27d-afe1-7289-0000e8609070","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.250.7.96","pattern":"[ipv4-addr:value = '91.250.7.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cd63a-0a6d-3845-970d-0000effaa899","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.54.82","pattern":"[ipv4-addr:value = '91.242.54.82']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3f6441-c357-2766-3706-0000065e8217","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.53.57","pattern":"[ipv4-addr:value = '91.242.53.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c932022c-3701-292f-32e5-000072dc709d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.199.173","pattern":"[ipv4-addr:value = '91.242.199.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6befd5c1-441b-0156-2814-000081bb1896","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.241.153.105","pattern":"[ipv4-addr:value = '91.241.153.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2138ec3-908d-78ca-3224-00004f345b94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.237.41.59","pattern":"[ipv4-addr:value = '91.237.41.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d46d145-31f2-04de-ca07-0000d939c769","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.41","pattern":"[ipv4-addr:value = '91.236.172.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f44ae6-dfb6-4ae4-f7d0-00003bce3c3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.107","pattern":"[ipv4-addr:value = '91.236.172.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051a82e2-83b3-308d-49d6-0000ca1dc555","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.234.26.163","pattern":"[ipv4-addr:value = '91.234.26.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--214dadca-a731-fff1-6814-00003c9172f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.139.9","pattern":"[ipv4-addr:value = '91.234.139.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d4419-749e-8fb3-bad5-00004f5238f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.137.10","pattern":"[ipv4-addr:value = '91.234.137.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a786b2c-188c-b430-adcb-000046b27a2b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.136.237","pattern":"[ipv4-addr:value = '91.234.136.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55eab51f-9855-ba8c-fdcc-0000d3b2af5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.132.155","pattern":"[ipv4-addr:value = '91.234.132.155']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25acc69-6fcf-6e28-dcbd-0000830e1f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.167.178","pattern":"[ipv4-addr:value = '91.232.167.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34651542-8259-51fe-87cd-00000a714e24","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.165.143","pattern":"[ipv4-addr:value = '91.232.165.143']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a30ebd-a9d4-a5af-2aa0-00001330087c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.99","pattern":"[ipv4-addr:value = '91.231.121.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2dd8426-9ed7-4852-34ae-00008ce8c5ed","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.8","pattern":"[ipv4-addr:value = '91.231.121.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d2b711-938d-0de0-2049-0000a33fd0c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.247","pattern":"[ipv4-addr:value = '91.231.121.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478f2001-3070-16b5-8c3a-00008796e52b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.226","pattern":"[ipv4-addr:value = '91.231.121.226']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36825a02-3228-96b0-ba47-00001c6b5fc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.199","pattern":"[ipv4-addr:value = '91.231.121.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--483326bf-3365-8ed8-12a8-000014b3cc94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.194","pattern":"[ipv4-addr:value = '91.231.121.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cb13c0-b794-c55f-885a-0000eaa7d776","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.120.164","pattern":"[ipv4-addr:value = '91.231.120.164']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e455a626-6203-4cdc-5939-00005988d281","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.84","pattern":"[ipv4-addr:value = '91.230.225.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e338623f-1246-376f-6ae2-00005e817a5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.80","pattern":"[ipv4-addr:value = '91.230.225.80']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae1fdc-b534-38df-0003-00000566be65","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.72","pattern":"[ipv4-addr:value = '91.230.225.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a07ef0-9951-0361-6dbf-000006e26a0b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.70","pattern":"[ipv4-addr:value = '91.230.225.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3615f70c-fbb6-792f-ac90-00002a8fad8b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.209","pattern":"[ipv4-addr:value = '91.230.225.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aaea9d-fcdb-e9b1-c1ef-000021d3eab6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.206","pattern":"[ipv4-addr:value = '91.230.225.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec27be37-6ace-71db-bfd0-0000193d61b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.195","pattern":"[ipv4-addr:value = '91.230.225.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db997c43-9bf6-c18d-a174-000027044965","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.16","pattern":"[ipv4-addr:value = '91.230.225.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42902df9-9e46-adc9-3ce9-00002542f73c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.15","pattern":"[ipv4-addr:value = '91.230.225.15']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec672039-236f-a9f7-e7ca-00009009f238","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.7","pattern":"[ipv4-addr:value = '91.228.33.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd7f2f6-c072-1f40-4b88-0000b4b6caf1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.138","pattern":"[ipv4-addr:value = '91.228.33.138']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6c2593-7f23-5f48-ec8f-0000b48b21df","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.123.9","pattern":"[ipv4-addr:value = '91.228.123.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b70b591-324b-e2ba-9964-000076b2c405","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.122.241","pattern":"[ipv4-addr:value = '91.228.122.241']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfafcbc-5b10-e57b-76d5-000059986754","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.86.109","pattern":"[ipv4-addr:value = '91.227.86.109']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bd35830-2b90-6959-5492-00001f15c7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.226.66","pattern":"[ipv4-addr:value = '91.227.226.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913edb1b-afe8-ffd9-e7c7-00001dd4e2d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.115.112","pattern":"[ipv4-addr:value = '91.226.115.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7f2fa6-7d58-a257-f670-0000f66fe864","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.113.156","pattern":"[ipv4-addr:value = '91.226.113.156']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f3e1a0-dffd-0ce1-62ce-0000dce944d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.224.92.74","pattern":"[ipv4-addr:value = '91.224.92.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daf1926d-8afd-8213-d5aa-00006bb18e5e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.69.206","pattern":"[ipv4-addr:value = '91.215.69.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dface50-0ed6-4884-f2c1-000063848c34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.146.234","pattern":"[ipv4-addr:value = '91.215.146.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9056b3-4e62-bf49-22aa-0000e8033007","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.214.138.207","pattern":"[ipv4-addr:value = '91.214.138.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0086f5ad-e9e7-a39f-5746-0000739d779c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.245.145","pattern":"[ipv4-addr:value = '91.207.245.145']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a86b8eb-71db-2c4b-32d8-0000ddd3a832","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.102.58","pattern":"[ipv4-addr:value = '91.207.102.58']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7390595-210e-fc3e-60ab-0000d9bf9ec4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.198.77.230","pattern":"[ipv4-addr:value = '91.198.77.230']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fa9132-32de-4cd1-c98b-0000cf9b9d74","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.196.228.252","pattern":"[ipv4-addr:value = '91.196.228.252']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d3d28da-3c1d-2290-48c0-0000eb816b7f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.7","pattern":"[ipv4-addr:value = '91.196.111.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efb4761-6c17-fe76-3a9a-000031bd6303","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.127","pattern":"[ipv4-addr:value = '91.196.111.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ffb6e5-bdc5-adbe-07e6-0000a4e822c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.194.91.202","pattern":"[ipv4-addr:value = '91.194.91.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52425138-d7f8-ab08-4198-0000ae103cf6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.192.204.163","pattern":"[ipv4-addr:value = '91.192.204.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bcbab1-66d0-bc40-b72f-0000738947fa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.188.247.151","pattern":"[ipv4-addr:value = '91.188.247.151']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2b4bfc-c54f-7f94-f710-0000fce43eaf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.186.249.112","pattern":"[ipv4-addr:value = '91.186.249.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac7feede-591f-b228-0737-0000fdea38bc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.170.9.78","pattern":"[ipv4-addr:value = '91.170.9.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8475d5d-a4ff-bb3c-38d2-0000bf2c053a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.16.243.113","pattern":"[ipv4-addr:value = '91.16.243.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa9c42b-0fed-9ccf-9ad4-00004f9ad744","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.152.6.16","pattern":"[ipv4-addr:value = '91.152.6.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da80088-5638-e67f-c947-000056b9fcc6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.150.213.146","pattern":"[ipv4-addr:value = '91.150.213.146']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de7186d-35e6-004a-87c1-000066dc2376","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.146.167.76","pattern":"[ipv4-addr:value = '91.146.167.76']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca187a66-3d56-5884-975f-000026942d36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.132.23.25","pattern":"[ipv4-addr:value = '91.132.23.25']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb2c5b8-3603-b1db-00eb-000062f1dd10","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.196.49","pattern":"[ipv4-addr:value = '91.132.196.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df32e150-b2db-ce03-5202-0000c855e3a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.125.26","pattern":"[ipv4-addr:value = '91.132.125.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a826ad91-8ad5-d6de-1671-000065de7f05","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.124.141.50","pattern":"[ipv4-addr:value = '91.124.141.50']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d22902f-45ad-2bbe-ea2a-000047f07526","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.103.249.254","pattern":"[ipv4-addr:value = '91.103.249.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa1381cc-0d7d-76a3-f8e3-0000581362ca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.70.76.142","pattern":"[ipv4-addr:value = '90.70.76.142']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2dbb16-ed71-cb57-dc01-0000e5c8d2d3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.52.100.31","pattern":"[ipv4-addr:value = '90.52.100.31']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376e3272-bfe1-4d85-2313-0000703dceb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 90.5.122.47","pattern":"[ipv4-addr:value = '90.5.122.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2caa1b1b-290e-a332-8166-000086b09df1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.3.109.42","pattern":"[ipv4-addr:value = '90.3.109.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecab3ee5-b6e0-93b0-e205-0000478b4584","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.247.51.22","pattern":"[ipv4-addr:value = '90.247.51.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f689efdb-9e66-ab88-53b8-0000f79aa699","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.230.22.194","pattern":"[ipv4-addr:value = '90.230.22.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc1d861-f56b-dada-14b8-0000510d78ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.188.231.181","pattern":"[ipv4-addr:value = '90.188.231.181']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]}]}